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^From the Editor 


Apple univen>e niay Ix! a fiii ehtioiic as of late—^stock price sway mg, app store antics, 

eic.—but ihe underlying technokjgy is sound. Of course, it's the techs that implement systems 

that keep all of this tiie rexk that doesn’t sway in the face of chaos. Tliis month, MacTech 
brings you some very rt)ck-scjlid foundational articles. 

This m(>nths Mac in tlte Shell column hKnses on learning Python. IVthon has l>een annmd 
for over 15 years, but is only awncly getting heavy use on OS X and OS X Server. I consider 
st ripling art absolute foundation of bt*ing a System Administrator. We’ve ctwered bash pretty 
extensively, and, while capable, hasli has its iimiis. Siart learning Python on the Mac for general 
or System Adntinislraiion use. 

Noah Gift brings us a multi part article on integrating OS X with <jtlier directory services. 'Iliis 
first article lays the groundwork for the follow-ing articles, and makes sure you have wltal you need 
to Ixfgin testing. 

Dave Dribin and the Roail Uj Cmle covers one ol’ the hallmark.s of tlic Mac since the very early 
days of the GUI: Lfndo support. Tliis is an irnponam next step ftjr developers to bring a polished 
exjKTience to users of their software. 

New author Sc-oit Corley presents an article that should l>e cjf interest to ilevelu[X"rs and 
System Administrators alike; all alKHU cmle .signing, Code signing lias Ixcome nion" important to 
understand under U-opard, and for applications that run on the iPhone. This article explains what 
it is and Itow' to tlig in. 

Our Geek Guide this month talks aixjut prujeciors and setting up a projectk>n environment. 
With all of the technology involved getting more affbrtlalile, it’s a great time to understand all of 
the variables that that go into a sy.stem fxfore you make a purchase, 

1 may have mentioned this before, hut I’ll take tlie risk of repeating tliis lidhii: System 
Administrators: you should be reading every w'orcl that Greg Neagle has to say. This montli, Greg 
talks alxxFi the c hanges in options for managed preferences that aime to us in Leopard. This is 
certainly another foundation that e%'ery OS X administrator should understand. 

On tiu- slightly mt>re cutiing c*dge, the third C4 ainference, C412k recently ttxjk place in 
Chic^ago, Regular contributing author Marcus Zarra was tme of the many attendees in aiiendance. 
If you don’t know w4uil C4 is, or do and wish you had Ixen there, check out Maims' repon on 
the conference. 

Tfie MacTech iSixjilighl tJlis month siiines on Blair Yakimovich from Iransgaming, Inc. 
’fransgaming has developed a tec*hnolcjgy that they've diiblxd ’’Cider.’’ Essentially, Cider is a Win.32- 
API emulator that allows developtTs to release games written for Window's for Intel-based Macs 
w ith tiule to no efftirl or changes in cocle. Consider it Rosetta for games. The technt^logy is pretty 
amaxing, and so are the people w'tirking on it. We talk to one of them in this month’s MacTech 
Spotlight. 

Tlials not all we have this month, so, mck open the rest of the issue, and enjoyl Also, don't 
forget to make ytjur plans for Macworld. We Iiojk' to see everyone in San prandsco at the .Matiec'h 
bcKith during the show'! 


Ed Marezak, 
Executive Editor 
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C4 (2) Conference 

a report on this year’s event 


by Marcus S. Zarra 




On SepcciiilxT % 2008, ihe third CA kicked oft; titled C4121. 
CA is a conference hosted by a Maciiitosli indeperKlent 
develt)|KT aiintxl ai the world of Macinttxsli developnieiil. 
Wlien you attend this confcremx" you know- that you are 
surriHinded by the l>est and liri^hiest t)f the Macintosh 
cJeveloper <’omnninity. While tlte Rrst txvo ol' the annual Cl 
conference were well received, they also .set the bar very’ hi^h 
for this yean Fortunately our host, Wolf Remzsch. w-as up to 
the task. 

Friday evening started out with a talk from Craig 
Fkxkenlx^ry and was followed by tlie creator of SQLite, Dr. 
Rit'harti Hipp. Craig's talk alx)oi his prtK'es-s for developing 
Twitterific was quite insightful and Dr. llipp’s discii-ssion tjf 
Syiite w'as s[>ectaailar. 1 sus|xxt cwen.more applications will 
Ix' utilizing SQUte in the near future. 

Saturday pnJtnised to fx* an extremely long day with 7 
talks lined up and finishing off waih a panel of experts. 
Personally. I found Rkli Siegels talk tjuite interesiing, A 
Discussion of Macintosh cle%'elnpment Irom the persfX'ttive of 
sotner)ne wiio lias \yaxm doing it for over 15 years was very 
insightful. In the aftenuK^n* tlie .session pa^^nied by a gn.>up 
of “Seairity liesearciters" was Ixjth suinning and terrifying. 
Tliey pR*ssc‘d so much information into their l-ikxk of litne that 
I will need to watch tiie videos at lialf speed just to consume 
w^hat they w'ere trying to explain to us. Brenl Siinnions 
wrapjied u]> the days sessit)ns with a talk on how and vviiy he 
t(x)k NetNewWire front a succes,sful paUbfor applicatitm to a 
free (as in beer) application. 

Al the end of Saturday night, Wil Shipley hosted a [)anel of 
experts to discuss a wide range of topics surrotinding the 
current w^orld of Macintosh development. Wliile lie fiatl a list 
of his own tjoestions he also vras fielding questions from the 
audience via twitter. The answ'ers to the questitims were quite 
informative and the panel reminded us ifiai there are alwTiys 
multiple solutions to any issue. 

Sunday fonunaiely ran at a slow'er pace and only had 3 
talks scheduled, altlK>ugh all tliree w^ere not to fx missed. Mike 
Lee's discussion on how to "pimp" your applications was t]ujle 
nt>te-wt>rtfiy. Andy Finneirs talk on Ixing an indeixmdeiu 
contractor renunded us dmi iliere are many ways to be an 
independent dev^eloper on the Macinlosli platform. Troy Gaul 


dtsaissed how LightrtK>m came alxnii and gave a terrific insight 
into the inner workings of Adolx. 

Sunday was WTap[)ed up with the presentation of the Iron 
Ctxier entries. This year's theme was on Paranoia and the API 
was Core ljOc'aiif>n. i\v(> of the entries centered around the 
crime in your local area and reminded all of us that Chicago is 
not tile safest city to lx* in. One developer w'ho lacked an 
iPlione decidai to do a clean room inijilementation of Core 
Lcx.'atit)n on tfie de.sktop; a .simply amazing accomplishment. In 
the end though, when tlie voting wa.s done, Glen Si Ken 
A.speslagh of Kaimm Netw^ork ended up winning the first place 
prize with their combination of tw*o ildione.s. a Wii remote and 
their MacBrxik Pit) 

I’nfortunately not everything at C4|2l was perfect. The 
conference definitely suffered frojn its own success. This year, 
the conl'ercnce was sold otU in less than 40 hours and thanks 
to some negotiating by Wolf, it was expanded slightly to allow 
a fniction of the vvaiting list to Ix^ added. Witile at the 
conl'erence you could definitely tell that we %vere af capacity. If 
you did not get to a session early enough you were left 
standing at the back t jf the rosjoi as iliere were simply not 
enougli chairs to go art>und. ^Ibis also caused some hotel 
issues and tlie Internet iiccess was sjK)ity. Hopefully next year 
the venue can ix ex|xindcd some how*. 

Overall ilie conft'rence w'as definitely wonh going to. I 
even u^'erhea^d stjme other attendees commenting iliat if they 
had to choose berw'een and C4 that iliey W'ould dKK)se 

Cl High prai.se indeed! 

i\\ I 
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Mac in the Shell 


by Edward Marczak 


Learning Python 
on the Mac 

An important, built-in 
scripting language 



Introduction 

Python \h a .scripting languagt* that breaks the nuild, in 
many respects. It Is fully object-orienVed, although ycnfre not 
forced into the “fully" pan. It uses in denial ion to denote blocks 
of code, and, it's named after Momy l^lhon. Us an ideal 
scripting language for OS X. The next tew Mac in the Shell 
columns will be dedicated to learning Python using OS X. If 
you're new to Python, or msty on the basics, iierc's the place 
to start. 

History 

Although P>lhon is enjoying a bit of a surge in popularitv; 
it wa.s creak'd over IS yeans ago, in 1990 by Guido van Rassum, 
and is quite mature. Again, think Mr>nty l^hon, tlie comedy 
iniupe, nor the reptile variety. Pyllion ts designed to be relatively 
simple to learn. Also, thanks to l:)eing op)en source, tfiere’s a 
version of Pytlion for just about any plaitbmi you can think tjf 
(and if there isn't already, t'ow can get it ninning there, rcxi!). You 
can leventgt' your f^hon skills wliea'-ver tlieres a fVthon 
interpreter, Ik^ it Windows, Linux, OS X or fx^rtable dev ice. 

OS X Tiger ships vviili Python versicin 23, and Leopaal 
ships with version 2.5 (23T, to iie s|x^cific). If you need to use 
version 2.4 for compatibility with existing code, or for your 
company's standards, source and hi nary* installers are available. 
See Ktlpy/www.pythanmac.org/packages/ for a starts if needed. 

Jumping In 

Interestingly, much like die bash shell that diis column has 
covered, the Python binary is hiih a run-time interpaner and 


an interactive shelf I'm going to present these exiiinples by 
using bash in Tenninal.app for now, and get into editors in 
future columns. So, let's jump in! Start by opening Tenninal.app 
(found in Applications > Utilities). Type python and prt?ss 
return: 

$ python 

l>ython 2*S.l (r251:5Jia&3, Apr 15 2008, 22:57:26) 

fGCC {Apple Inc, build 5465)) on darvin 

Type "help", "copyright", "ctedit.^" or "llcenfie" for more 

informatioti, 

»> 

Tile python interpreter prints some inlrodiiclc^ry information, 
and liten leaves you at a prompt, lire triple greater-than prtmipl 
lets you know that youTe in Pythons intenictivc shell; python 
is now' ‘"listening." Test this out (w4ial you type is in bold ): 

>» 1+1 
2 

»> a="bltie" 

»> print a 
blue 

As you can see, the python interpreter is acting on our input, 
and displaying output where appropriate. Of course, what we 
tyjx* needs io Ik* valid: 

»> call_hoiie 

Traceback (most recent call last): 

File *’<stdln>", line 1* in <no<iuie> 

NanteError: name 'call home' is not defined 

Variables definetl in an interactive session ficrsisl only for the 
duration of tliat ses.sicm: 

>>> myHamie “ "Ed" 

»> print "Hello. "+iiiyUame 
Hello, Ed 
»> 

$ python 

Python 2,5.1 (r25l:54861, Apr 15 ZQ08, 22:57:26) 

[GCC 4*0ll (Apple Inc. build 5465)] on darwin 

Type "help", "copyright", "credits" or “license" for more 

Information, 

»> print "Hello. “+myNaiae 
Traceback (most recent call last): 

File "<stdln)". line 1. in ^module) 

KanteError: name 'rnyHame' is not defined 

'llie “^11'' on the fourth line represents pavssing control-d, and 
is liow' we exit the interactive pvthon mteqireter As you can 
,see, the myName variable tvas lost when we exiietl ilie 
interpreter, and was yiiknt>w'n by the new' interpreter. This 
makes the interactive jiytlion shell a pkiyground, wliere 
yt)u really i"anl damage much. Despite tills. 1 end up not using 
the interactive eiivirt)nmenl very often, lliere are a few' quirks 
to using it, and it dexsn’t always nuKlel the w^iy a script will 
run. In essence, 1 use a text editor and run the program at a 
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bash prompt. For now. we can use vi/emacs/pico or whatever 
you're comfortable with. If youTe a liard-line GIH person, but 
don't have a choice of GUI editor as of yet, tlie free 
*rextWr;ingler from liareBones is very highly reccjmmended 
(hit py/wwTv. barebones. com/ prod u cLs/texl wra ngl e r/). 

Hello, World! 

It’s probably not ttKi surprising that Fd stun tiff with the 
classic ’'hello, world" program. It certainly is an easy way lo 
ensuit: that our basic envirc^mneni is wt>rking and that we know 
how to ctxle a basic example. In your text editor, enter the 
following: 

I / us r / h±n / euv python 
print ’'Hello, World!" 

Save the file as hello.py when done. If youVe strictly using 
the shell, set the executable bit on the file: 

% chvod 770 hello.py 

and nm it: 

$ ./hello.py 
Hello. Worldt 


(If ytm’ve opted to use TextWrangler, you can skip the 
ciiniod/run dunce-you can even skip savel-and choose 
“Run” from the menu. Output will slitnv up in a new 
file. If you want to he really coo!, add a shortcut to Run 
using System Preferences > Keyboard ik Mouse > Keytx>ard 
Shortcuts). ^’HeUo, World” is pretty basic, bur it illustrates a 
few things: 

Python 15 installed and working on your maciiine. 

Pyihon can used as a run-liine interpreter 
Tlie nuxst basic structure of a [python program. 

You can copy from an article and type correctly. 

Pyihon is designed to be simple, with clear syntax. Not 
AppleSciipt’like syntax, bui consistent and fairly obvious. It 
lends to l^ shorter, yet clearer llian other scripting languages. 
Without explanation, kxik at the following cikJc, and you can 
surely understand what it dt>es: 

#]/usr/tain/env python 
a “ 51 

^ecpndNuii = 17 
mesiage = ’’The fiam Isi " 

sml * a + secoodNum 

tuessage - message + strtsiual} 

print message 
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(11iis simply prints Hlit? sum is: TO'’. Yes, it was needle.ssly long 
for dcnionsiraticm puqloses). 

While a bit contrived, this is also a usefiil exercise, and shows 
us a few things about the language: 

Identifiers (or, "variables'’) have no decorators (like a 
dollar-sign prefix). 

Variable nanjes nnisl Marl witli a leiier, hut the remainder 
can ctinsist of letters (upfier or lowercase), miderseores {*_') or 
digits (0-9). 

Variable case mailers! ‘*varial)!er’ and ''Variable P are not 
the same viiriahle name. 

Python tends to do what you expect. While the plus sign 
adds twfj integers in the first occurrence? above (a + 
secondNum), it is utxrhaded to also concatenate strings us seen 
in its second use alxwe (niess;ige -r strisumD). 

What is nol obvious from this example is a point I made 
earlier: Pytlion is a fully object-oriented language, and 
everything Is treated as an object (hut d<jn't feel objectified 
ytnjrselR). Again, vuriables are idenLifiers to memory locations; 
Ibnner and current C/asm paigrammers should understand 
this implicitly, 'lb demonstrate this, the id () fimction can be 
used to retrieve tlie currem memory location. TliLs Lime, I will 
use tlie interactive shell Type python in a command shell 
to enter the Python interpreter. Assign a string ro the variable 
a: 


>» a = ‘this is a string' 

display it: 

»> a 

‘this is a string* 


U‘l s see its memory address: 
»> id (a) 

44^040 


Now, add on to a: 

»> a " a+" that Is not a bulldogr 


and ,slmw ihe address of a again: 

»> id (a) 

6221136 

The address is completely different! What happened? 
'Ihe ‘‘a = comma mi doesn't simply add on to the 

existing siring in a, but throws a away entirely, creating a 
new variable from the result of the operation on the right 
hand side (HHS) of the equal sign, 

Nt>l having to w'orry about underlying memory is a 
hallmark of most scripting languages. Python takes it to 
another level, though, by handling garbage 
collect ion/memory reclamatioti, allowitig you access to 
those lower level details and handling memory efficiently 
Watch this demonstration: 
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CrealL' u variable: 
>» 6=5 


Create a second viiriahle etjual to the first: 

>» h=g 


l^rini I he .secx>rtci varia[)le: 
>» h 

5 


Find out where they Ixjlli live in memorv: 

»> id(g) 

84022&4 
»> ld(h) 

8402264 

However, reassign one of the variables that point to the same 
memory: 

»> h-7 

...and the former is not altered: 

>» 6 

5 

»> id(h) 

8402240 

So, if two variables are equal, iliey can simply ]>oint to die same 
location m memory. In this example, like tlie previous example, 
UsSsigning something to one of the variables creates a nw 
varialile, and it will, most likely, receive a new k>t:atinn in 
memory. While you don't really have to care aliout ivherv 
Python stores data in memory, this is a core concept in Pvtlinn, 
so please ensure that you understand it before moving on. 

Data Types 

While no declaration of a variable is needed before use, 
IMhon is a strongly typed Imgtiage and, once assigned, a 
varialile’s type cannot be changed As mentioned earlier, 
everydiing in P>lhon is an object. Every object has the basic 
atiriliiites of identity (memory address), tyi>e (how to treat 
what’s in that rnemoty' address) and value (what is actually 
stored in that nienioiy address). Certain (objects are itnmukihk\ 
meaning that their value cannot change once assigned. 
Conversely, other types are mutable, and ran change their 
value What are these types? Here is a list of basic data types 
built-in to Python: 

Numeric: 

Integers: elements from the mathematical set of integers. 

Plain Integer (int) : range from -2147483(i48 through 
2147483647. 

Long Integ er: Basically gives an unlimited range, 
subject to available memory only (virtual induded). 
Boolean : True and Fal.se (behaves like 0 and 1), 
Floating Poini Nunilx.Ts : Double-pred.sion Ooadng 
point numbers. 


Complex NumlxTS : These represent coin[)lex numlxTs 
as a pair of machine-level double precision doating 
point numbers. 

Sequences: Any data ty|x* in tlie .sequence category is a finite 
ordered set, indexed by non-negative numbers. 

Strings : Simply, an array of 8-bit bytes. 

Unicode : An array of Unicode code units. In other 
words, a Unicode string. 

Tuples : This type is a taie Python-ism, and represents 
an arbitrary li.st of objects, fonned by comma- 
separated list.s of expressions. 

Lists : Mutable; a comma separated list of arbitrary 
Python objccLs. 

Sets: Like sequences, however, sets are imordered. finite sets of 
unique, immutable objects. "Ihis also means that sets cannot be 
indexed like setiiiences can. 

Sets: Mutable unordered sequences. 

Frozen .Sets : Immutable unordered sequences. 
Mappings: Mappings are finiie .sets of objects, indexed by 
arbitrary index sets. Tltis ryi>e is mutable and fast. 

Dictionary : Ihis type is a collection of key/data pairs. 
Also known as a hash lalile. 

Files: Represents an open Ole. Rememl>ering tliat eveiydiing is 
Unix is treated as a file, this iy[x includes on-clisk files, but also 
stdin, .std oiii and .Htderr as well. 

Bmiuse everylhing is an olijecl, the lisi is more expansive 
then fm detailing here ( for example, clas,ses are a type, also). 
Also, custom types can l:)e defined and im]>oited into a 
program, although, custom types are made up of the 
foLtndationul type.s. Fur our introductory puqxises, though, this 
is ju.st the right amount of information. 

You've already seen examples of strings and integers in the 
examples in this unicle. Since they're the mosi familiar and natural 
to most people, fll continue to hxus on those tyfxs for now. 

Let’s Talk about Strings 

Strings in Python fall under the category of a sequence. In 
effect, iliey are arrays, and can be ireauxl as .such. Python lia.s 
fast and effective siring manipulations and idioms that you 11 
need to lie eomfE>rTable with before moving on to anything 
even remotely advanced. 

For this pcjrtion of the article, you can use the interactive 
interpreter to gain an appreciation of strings and string 
manipulation a little 1 aster, and then well pul it together 
afterw'ards, Get into a shell, type python, and look for the 
triple-greater-than prompt, ikst way to learn alx>ui strings is 
through examples. A.ssign “I am a siring” to the variable "texf': 

>» am a string" 

Display it, to verify: 

>» text 

‘I am a string* 

Select only the first character from the variable text: 
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»> text[0] 

■r 

(remember: we stan counting from 0). Selecting part of a 
sequence is called a slice in PytlK>n. Slice of character range 2 
thougli 4: 

>» text [2:4] 

"ara' 

(A slice includes the first character specified up through hut not 
including the specified ending character). Display element 5 
through the remainder £)f Lite sequence: 

»> text[5:] 

"a string' 

Leave the start parameter empty to start from the lK‘ginning: 

>» text[:4] 

'I 4Jn' 

A slice can also accept an option third parameter to specify a 
step: 

>» te3d:[::2] 

'la tig' 

(In Other words, start ai zem, run through the end, giving every 
second character). Negative values for the step start at die end 
of the sequence: 

»> text[:;-lj 


‘ gnlrts a cia I' 

In most other languages, there are dedicated sub-string 
functions to perform the kind of nianipularkms yotfve seen 
here. Python generalizes diis by allowing slices to work for any 
sequence type. We'll see more of this as we get into other types. 
Strings can bt* concatenated and printed in a few different 
ways. Let's assign two variables as strings: 

>» a“"Hello" 

>» b^"there" 


4he print command can use a comma, which adds a space 
character to the output: 

»> ptiiit apb 
Hello there 


The plus sign can [>e used to add strings together: 

>>> print "+b 
Hello thorfi 

Tiult's the raw basics of strings, witii a little left over for next 
column. 
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How Python Works 

Kefore we wrap up this tolunm. I want to make it [>erfectly 
clear h{)w Lliis is all working and some unique things 
Pylhon. First. Pytlicjn programs are simply text files, Tiial’s it; any 
text eciitor can be used lo create and edit soitrce cocie for a 
1^1 hon prograiiL Tltese text files ty^pically are named with a .py 
sulTix. but lhats not teehnioliy necessary, although l“d utge you 
to get into the habit of doing so. Tliest* text files are run tiirough 
the Python inieq^reler. Unlike nainy other scripting languages that 
read a line of source and then execute it, Python has a nick its 
sleeve. 

l^fore running source* axle, tlie Pytlion interpreter creates 
an iniennediate byie-conipiled version of the pn>grani. This 
rnachine-indepemlent version of llie Si)urce is created 
automatically for you. It is this data dial is ilien fed to a Python 
virtual machine. All of this Is done to speed exmition. When a 
hyte-L'txle compiled version of your axle is created, it Ls saved 
alongside the source wiili a .pyc P^pytlion compilecr) extension. 
(Of course, it will only do tills if‘ you have write permksk^as to 
liie directory with the sour'c. If yon donl, no liig deal-python 
will create the hyte-eexk* in memory, and drop it on program 
completion). Here’s another sjxxtj saving step: if python finds a 
byie-cxxie compiled pyc file with a timestamp newer tlmn Lite 
scKirce-m other words, the sourc'e ctxie luisnH Ixfen toiicited since 
the .pyc file v^as creaied-pytlion siinj)iy uses the already compiled 
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.pyc file. For larger prognims, this ts a huge Ix^nefii in siartu[) and 
Rtn-time speed. 

If you've Ix-en following along, and you created a ""hello.py" 
fiRjgram, but notice tliere's no corresponding .pyc file, you’re 
rightf Pytiion only creafes hyie-t txle for source that is imported - 
a topic well txiver next jnontJi. In tiie meatitime, if yoii wmi to 
fex)! pytliun into creating a liyte-code compiltxl version, we can 
(although, be aware tbit you do noJ need lo do this in tlie real- 
world, and is for illustration purfxises only), Create a new 
program called shell * py in the s;mie tiire(H>iy‘ as hcllo.py, and 
type in the following short program: 

#!/uEr/bin/env python 
import hello 

Do the save-chiiKxJ dance outlined eariier, and run it You II see 
the faniilutr ^l lello. World!” outpiik If you now list the directory, 
thouglk you should have a new file named hello • pyc. 'Ihis Is 
a complete representation of the source in hello.py, simply pre- 
aiinpilcd for the Python virtual machine, In fact, python will 
kippiiy run this without the original stjurce, Haiiove or otiierwise 
amame hello.py. Now, ask pvllion to am the bytenxxle: 

$ python hello.pyc 
HellD, World! 

'Fills ability will axiie in handy in other ways-Mimcthing we'll 
cover in future colujnas. 

Fin 

While this was a S!m[>le, gentle inirtxluctiun to Pytlion, it 
pre^stmLs the right foundation for us to build on, It also shcnild give 
you enouglt to ftK>l around wath. Ctinsider a hit of homework, just 
to make you gc.j througfi the [juxess: write a progmm that creates 
two integer variabies, "start" and "end" and one string, "lexF. Have 
the j^rogram [>rint a slice of the sming using the variables and a 
print statement that piecxxles the string with "llie slice is: 

Overall, Pytlion Ls cwy, and makes a gitrai first scripting 
language or intnxiuciion to puigramming. Next mtmtlc weil 
cover the exeni'ise, anti get in a litde deejXT, 

Media cjf the monlli: 1 don’t think I've ever had a media 
selection tie into tile column at all. However, for just tills once. Ill 
gt) for it: "The Uompkie Mtmty PytlitHVs Flying Qrais id-'lbn 
Mega.sel" on DVD by Eric Idle, Jolin Cleese, Otiol Clevx^land, Terry 
Gilliam, and Terry Jones" Old fan or new, it’s jtust funny 

Until next month, go pratiice some Pvtiion! 
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Integrating OS X With 
OpenLDAP/Samba, Part 1 

Configuring Your Mac To Work With Linux 
Samba and LDAP Servers. 





Introduction 

OS X \s an incredilile machint?, of coun»L% if art* ntraclrng 
this magazine, 1 dicliVt nfetl to tell yon that. It Itils ai^tiahly, liic 
fine-st User Intertate ever known k j man, yet it lias a lK*autiful Unix 
engine purring tinder the hcxxJ, OS X Serv^er also has a sc^mewhat 
ftjrwaal tliinking User Interlace lor managing the raw ptAver of 
taie Unix, as it elegantly hides the real wtirid eoniplexily of 
dealing wiili things like Apadie and Open LDAP 

While OS X Ser\^■r is certainly a fine piece of engineering, it 
naghi interest ni;iny to know, that configuring OS X to laik ttJ a 
Linux inlrastmtiun.* is lairly siraightlbrwanJ, i still renienilxfr 
fondly, when parts o{ OS X Iwd to lie dtea^d, iti ati undoaimented 
way, just to get it to work perlecdy with Linux and Unix systems, 
Ixit many of llnise problems liave dlsappeiirctJ over die years, 
Virtnalizaiion. Ix'ojxird, and tlie furtlier enluineement of Linux, lias 
cruited a ver^^ opjxiraine tnomeni for OS X/Linnx relations. 

In this article, we explore the basics of gening started with 
using Samba hcjstcd on a Linux Virtual Machine. Future articles 
will get deejXT into Open LDAlVSiiinlxi integration. 

Talking Virtually 

As 1 mentionetl earlier, vinualizatton lias ea.sed the difhculty 
of' working wiili Linux. One of Uic tea.sons is that, in some 
nespecLs, tlie Linux Openning System has become like a dfKtiment 
tliiit you oj>en and close. If somet)ne writes a great leniplate for an 
invoice or rtfsume in Microsoft Word, or iWork Pages, then you 
simply ofK*n the file, and fill in the blanks. 

With the airrent advunces in virtiializaiion a Linux openittng 
s>^stem can lx* aimtxsi as easy to w'ork w illi as Microsoft Wbal. For 
a recent Ixxik I wK>ie, we releised a fiee, as in L'bunm 7,10 
virtual nuichine that is pre<onfiguntxl with OpenlPAP and Samlxt, 
You cm dowmload it here, start it with VAfW-'are Fusif>n, and tlien 
j\Lsi play it: 

http://example$.oreilly.com/9780596515829/vm/ 


llie iLsemamt' and piissword for ever^tliing on the virtual 
machine is py4sa, inckiding tlie Samlxi servlc'e we will use in this 
article. 

Getting To Know Samba 

If you are on old Mac gny or gal, you may lx: more faintluir 
with AFK or Apple File I^nJUJCof tluin wiili Siimlia. Briefly, Samba 
is Open Soua’e/Free stilhvaR* that has lieen around ,Hinc^* 1992, 
and it enables llle and l-^tint sliitring over tlie SMB/CIFS protooiL 
SMB origtaied with .Micn>stifi ;us a netw< irk sliaring protocol for 
Vtlnclows. 

SluhItj is pre-insuilled on OS X and you tun easily crcitc a 
samlxi share on your Mac by simply seleLling File Sharing under 
Sharing in System Preferences, lts seen in tlie saeenshot: 



Figure 1: Sharing 
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Your email program does 
not have one of these: 


/ 



Ours does. 


Imagine an email program that was smart 
enough to observe and learn how you handle 
your email. Like offering to reply to certain 
types of email messages using a response 
you've previously sent. Or giving you the 
option to auto-file a message you've read 
based on how you've filed similar messages in 
the past. What if you could defer a message 
from your inbox for a few days or weeks, so that 
it magically reappears later when you're ready 
to deal with it? What if this program had an 
amazing junk mail filter that would leave your 
inbox devoid of spam? What if this program 
was as familiar and easy to use as Apple Mail? 


After three years in development, we've 
finally created that program. Outspring Mail 
is the newest email client for Macintosh. 
We've taken the best features of existing 
email programs and coupled them with our 
patent-pending intelligent functions to 
create a program that will make your email 
chores far easier. And since this is a 
current-generation application, it supports 
major email protocols including POP, IMAP, 
SMTP and SSL. It also runs natively on the 
latest Macintosh computers and OS X 
Leopard. But don’t just take our word for it. 
Check out the details at www.outspring.com. 


Outspring Mail. For those who take their email seriously. 


outspnr-^ 

Mail 


5331 Skylane 
Santa Rosa< CA 95403 
707-S23-7711 
hn p://w ww.outs pri ng.com 




Mac 


Universal 


Soutspring 


O200BOiiTitprjng tnc. All rtghrrs reservHf. Ounprlng Isa registered trademark af Outspring Inc Macintosh isa regisered trademark of Apple Inc 








In OUT OLse, llKRigli, wc aR" going to use virtualization to talk 
to a share we create iaskle of the virtual machine we ckwnloadtxJ, 
so iastead of .serving the shaR\ our Mac will 1 k‘ llie client. 

Firing Up A Virtual Machine 

If yim downloaded the Virtual Machine you should pertbnn 
tile following steps to make smr you get up to speed to follow^ the 
rest of die article. If you have prtihlems with the virtual tmtcliine 
networking, or doni want to downkxid a S(X)MB file, dont worry, 
Ix-atuse in a later article w^e go into detail about how to configure 
this from scratch. Note, you will neeti to have a copy of VMWare 
fiision to follow along. 

Step 1: Start the Virtual Machine 

Step 2: Once nmning, log in wiili pyi.sa as tlie username and 

passw'ord 

Step 3: Double check that siimhi Maned by typing at the 

shell: 

/etc/liilt-.d/scUiiija 

Step 4: Knsure Network Is Working I>y typing at slicil ifconfig 
ifeonfig 

Here is a .screeashoi of whai this kxiks like a successfully 
nmning virtual machine: 



Figure 2: Verifyifig VM Is Working Properly 

Creating A Linux Samba Share On 
AVM 

If you performed die pR*vitms steps and everything working, 
die R-st Is just as easy. We can simply edit the s^imta configunaiion 
file and add a share tor m to connect to. To do diLs just edit diis 
file: /etc/samlTj/smb,amf with vim, or your favorite texl editor, 
and adtl these lines to the Ixittoni: 

lisHng h Adding lines to/etc/samb^smhconf 
[Khare] 

path = /usr 
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Next* jusi restart die .samija service so it rere;ids the config file 
by typing in: 

sudo /etc/itlit.d/ganiba restart 

Now simply browse to the share PY4SA, by creating a new' 
Finder window^^ as shewn in the figure below' and auihenticaiitig. 
If you follow' along widi llie steps below' you w ill be able to obtain 
Read Otily Access to the /usr directory on the virtual machine. 


Norice, as shawm in Figure 5 alxwe, that if ytwi try to create a 
file onto die sliare you gel an acce^^s privileges error. We only liave 
Read Only access! Tills is because of the extremely' basic; 
configuration for Ishare] we .set up. If ycHi are brave, feel free to dig 
into the smbxxmf and Ox Lite pniblcnn. Otlienvise. next month w^e 
go all out on dealing a realistic pemiission stnicture for an 
Enterprise or a Home. For now^, fust gelling a virtual server up and 
running, and then a>nnecting to it Is a gtxxJ stride. 


^ A o 





Figure 3: Logging in to a Samba share 



Fntpr your us«r namp and pji^twnrd to are-#t« 
thfi fill server'*pv4sa''. 

Conntcl as: Q Cuest 

@ Registered User 


Conclusion 

In this article, we liegan to tliink about how^ a virtualized 
Linux infrastnictuie might make sease for OS X clients. We created 
a one wriy, Read Only lonnetiion to an Uliuntu Linux virtual 
machine via a SMB shaie we created ourselves. 

in the next article we dig in deep and configure L!^AP and 
Samlxi to wx>rk itjgether^ crcxire a aralLstjc shaR'^ jKmnission 
strucium, and autlienticale our Mac's directory to a Linux U3AP 
.scn'CT, as well as get familiar with managing LDAP thmugh \'arioiLs 
natne and foa^ign iixils. 
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The Road to Code 


by Dave Dribin 


Nobody’s Perfect 

Document Change Count 
and Undo 

V _ J 


The Document Change Count 

As a starting point, 1 have included, in Listing 1 and Listing 
2, our My Document from Iasi nionlirs article tliat used 

Cocoa bindings. Our changes will be centered on this class. 

Listing 1: My Document.h 

^Import Cocoa/Cocoa.h> 

@lDterface liyOo come tit : HSI}ocufiienL 
t 

^^SMu.T:sbieA^^ay * _irectan&les; 

I 

^i’prrvport y [rt^uilwr 11 f, :tipy) MSMitlsbleArriiy ' rectangles; 


Hie last .session of Hoad to Code left us witii a dtxnmeriP 
tra.sed applicatitin ihat used tcmtrollers with Ccxxja bindings to 
hook liic [II up Uj our mtKid. Unfortunately, we have a lingering 
issue. Typical Mac OS X applications track changes to tlie u.ser'5 
dcxiiments and mark tliein as “dirty” when he makes changes. 
Thu.s, when the user tries to clcise the win<iow' or c]iiii the 
ajiplication, you gel a warning sheet alxiui unsiived changes along 
with tile chance to save the dcxTirnent. Hie red close button in the 
window^ bar shows documents that are dirty^ by placing a dot in the 
rcxl button, as sliown m Figua^ I. 


o O 


Figure 1: "Dirty " Dot in Close button 


Typical Mac OS X applicatioas also allow users to undo and 
redo their changes. Nobcxiy is perfect, and everyone likes tlie 
ability to change his or her mistakes. 

Unfortunately, our apfilication does not behave this way 
Users are able to change tlie width and heigJit of existing 
rectangles or add anci remove rectangles, and then dose the 
windtiw^ or cjuii the applioaticm with nary a “Do you want to 
.saver warning. On the plus side, Apple’s dcxiamenr-based 
architecture provides hooks for us to manage the state of the 
d(xument and pnavide undo support. 


Listing 2: MyDocument-m 

(?import ''MyDocument.h** 
limpprt “Recungle^h"' 

^^Impleiaent^tion My Document 

§synTheLsi::e rectangles =‘ ^rectangles: 

- (id)Init 
[ 

self = [super initj: 

i- f-- ^ “ nM) 

return nil: 

^rectau^;iea L iNSHu? ^bleArray alloc] init] r 

return self: 

I 

(^SStrin^ *) windowNlbName 

[ 

// Override returning the nib file name of the docuBieni 
// If you need to use a subclass of NSWindowController 
01 if your document suppatis nnililple NSWlndowControllers* 
you should remove this Eethnd niid override ■ 
makeWindovCantroilers instead* 
i e:niri ^’'MyDocujnent"; 

1 

(void)windowCyn L rollerDidLuadNlb:(NSWind ovCont roLier *) 
aControlIer 
i 

[i:ni]u r windowControl]orDidLoadNib:aController]: 

// Add any code bere that needs to he executed once the 
wlndowConr.rtJiler has loaded the doruraent^s window. 


(NSData UdataOfType: (USString UtypeName 
error:[NSErtor **)ontErtor 
I 

NSDala * rectangleData “ 

iNSKeyedAtchivet archivedDataWithRootObject :_L'ectangles] : 
t! = uru recrangle.Data: 

‘ (BOOL) readfromData: {NSDaia *)data 

ofType: (^fSSt^^ng DtypeHame 
error : (NSStrcji ‘ * JoutHrror 

1 

rectangles LNSKeyed’Jnarchlver 
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iina rchJ veObjectWlthDa ta: da ta ] i 

return YESj 

} 

Before we proceed, we should formlly go over some terms. 
Wiien a dtxrunieni can Ix,^ safely ckxsed without losing any 
changes it is called a dean docLiment. Once die user starts 
editing a dtxument, it must lie saved or changes will lie lost, and 
the document is called a dniy document. The NSDocument 
keeps track of w'liedier llie dcxuinent is clean or diny. The 
1 sDocumentEdited methtxl rettiras YES if the document is 
dirty and NO if the d(Kument is t:lean. If you do nfithing it always 
retiiras NO, whidx is why ourdcKument can fie dosed witliom 
prompting the user to .save. To change the dociiiiient state, you 
fiave to u.se the npdateChangeCount: method. 'Ihus, in your 
NSDocument .suhdass, ycm would liave cxKle that kxiks like ihLs 
every' time the user edit.s the dcKunient: 

[sei! updeteChangeCoujJt: NSCbangeDonel: 

Why every' time? Well, the dtxumenfs edited suite is 
actually implementerl as a count called a change count. 'Ihe 
dcKinuent is dean when the change eouni is zero, and ifs dirty 
w'hen the change count is greater than zero. Wiy use a change 
taiiint, rather than just a simple BOOL flag? This is useful once 
we talk about undo. For example, if the iistT makes five edits on 
a clean document, it becomes dirty. But if die user tlien nins 
undo five times, the document should be dean again. By 
imfilementing the d<K'umeni status as a change count, this is 
relatively easy: edits increment die drange count and undos 
decrement the change count. We will lie covering undo later in 
this arlide. 

To increment tlie change eount. we pass tlie 
NSChangeDone argument to the updateChangeCount: 
methtxl, as I noftxl above. So to make sure our dtxumeni is 
nuirked dirty, we just ncc-d to increment tlie change eount any 
time the user makes an edit. Sounds easy, right? Well, il turns 
out to be relatively easy, bur not trivial, tiefore we start updating 
die change count, let's list out all tlie possible ways a user t:an 
edit a rectangle tlocument: 

Add a new' rectangle, 

Remove an existing rc'clangle, 

Change die widtli ol' an existing rectangle, or 
Change the height of an existing rectangle. 

Before using Ctxtya bindings, these edits went through our 
dcxtimenc sulxbss, either through button actions or the lable 
data source, lliiis. without bindings, you would update the 
change count at these places in your dcxaiment subclass. 
However, with Cocoa bindings, the array conindler now handles 
all these edits, w^hich actually complicates things a little. 

Let's start with marking the dcxiiment as dirty when adding 
and removing rectangles. Our MyDociiraent class lias a 
rectangles propeity that Is of type NSMutableArray. The 
array controller is bound to this property, so whenever rectangles 
are added imd removed, it uses liie setter of tills firofxrty. 
Currently, the ,sener of this property is generated for use widi die 


^synthesize keyword; however if we write our owm setter, 
we c^n insert code to update the change count: 

- setKectangles: (rJSHuEiableArray ")rectangles 

I 

if (rectangles .rectangles) 
ri'M .irn: 

recr.anglec ^ [re<^r.ang1 es copy]: 

[sell UpdateChangeCount:NSChangeDone]: 

I 

Tlie last line is the imp{mant line that marks the document 
as edited. If you run it now; the document will lie marked as 
dirty as soon as you add a new rectangle. 

However, the dtx'ument wall not be marked as dirty if you 
change tlie width or licighi of an existing rectangle, in order to 
see this incorrect behavior, you will have to save a document, 
which will mark the dtxaiment a.s clean, and then change a 
rectangle. 

To fix this, we need to handle the last two kinds of edits, 
When a width or height changes, it goex through the army 
controller, so you may dimk that subcla.ssing 
NSArrayController would Ix" the w^ay to update the change 
cx)Lmi. It rums out that this is not the best way to implement the 
change count update, as NSArrayController is not meant to 
lie subclassed for tills pupxjsc. 

Key-Value Observing 

■Ihankfully, there is iinother w'ay. We briefly talked almut 
key-value observing or KVO in a previous article, but now we are 
going to use it in earnest. KVO allows t)ne object to otiserve 
changes of another object, thus we can use KVQ to watch for 
changes to existing rectangles. KVO is fiased on key paths. An 
oiijecl starts observing a key path on a target object and gcis 
notified wlienever that key path change.s. We need to setup 
MyDocument. as an observer for the "width" and “height” key 
path of all recttingle olijects in the _r^ctangles array UTs 
start off by creating a method in MyDocument that sets itself up 
as an observer to a single rectangle: 

- { vtjJ.d)fii ariObiscrviugJicciangle: (t^uciang'! *) rectangle 
I 

[rectangle adaObserverrseli 

f 0 r Key Pa t h: ^ ”wid t h ’* 
options:0 

ceutext: AkRectangleEditContextl: 

[rectangle addDbsexVEjrseli 

f orKeyPa tb: ^'’beight * 
options:0 

context:&kRectflngle£ditContextl: 

1 

Since each KVO registmtitm is for a single key path, we have 
to observ^e each key padi inde[iendently. We do not need any 
options, hut we are using the context. The 
kRectanglaEd i tContext Ls a .static variable we need to set 
at the top of our source file: 

star in NSString * kRectangleEditContext “ @"Rect, angle Edir'": 

Tlie context is a void ' value and Ls passed in llie KVO 
notifications so you discern between multiple oliservers. 
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Reniembei’ that void * Ls a poinier icj anything. It does not 
even have to be an Ol>ject]ve-C object, byt we are using a pointer 
to an NS String * because it makes it easy to create a unique 
pointer value. We are using the same context Ix^cause w'e want 
to perform lire same acLit m wlien cither tlie "^idtii" or 'lieighf 
clianges. Next, we have to implement the method that gets 
called when an obser\^ed key path changes: 

- {void)observeValiieForKeyPath; (NSSrdfig MkeyPath 
ofObject: Cii)object 

change:(NSDictionary *1 change 
context:{void context 
f 

if (context = ikP.ectangleE^irContexal 

I 

t sel f up date Chan geC o unt: NS Change!) o ne j : 

I 

elee 

t 

[finper obaerveValueForKeyPath:keyPath 
ofObjectrobject 
change:change 
coniexi:conlex l]: 

1 

] 

All KVO notifications go through this one methixl. This is 
different than NSNoti float ion-based notifications, where you 
can chtx jsc a mcihod for notification delivery, and tlris is why the 
context is so important. Here, we compare the context against 
the addres.s of kKectangleEditCont&Kt we used in to 
addObservorIf it is that coniexu we update [he change 
count to mark die dexument as dirty^. It is important to call your 


superclass's implementation if you do not handle die KVO 
notification in case it needs to handle its owm KVO notifications. 

We also need to create a method to unregister for KVO 
noLificatioas, w lticli we will use wiien a rectangle is removed. Ir's 
important to always remove yourself as an observer otheiwise 
you may get mniime errors. 

(void)stopObservingRectangle:(Rectangle *)rectangle 

I 

[rectangle removeOhsetver:sel£ 

fo rKeyPath:@“wid th"J: 

[rcctangle removeObaerver:ae1f 

forKeyPath:^#''[jelghi"j : 

) 

Wc now^ have our K\^0 infrastateture in place, but w^e are 
not yet obseiving any rectangles, Ihe place to do this is again 
in the set Rectangles: setter This method gets called with a 
wiiole new' array of rectangles even if a single recumgle is added 
or removed. I'lie behavior we w^ant is to .stop observing all 
rectangles in the old anuy and then start obser\ing all rec:iangie.s 
in ihc new array. Here's wliai that looks like: 

- (void) sntkectatigles: (IJSHutabl^Array rectangles 
I 

if (rectangles = rectangleis) 
return; 

for (Rectangle * rectagie in ^lectangies) 

(lit stopCibservingRectangle:rectaglel: 

jer'.fnpjp^: = [recTangle^s copy]; 

r;>i [k^^rtangle * roctogle ' i’ _: ■ ■■ anglr';::) 
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[pelf etartObservingRectaiiglejrectagleJ : 

[self updateCbangeCoiint :NSChangeDofje]: 

I 

Su, befoi'e setting tlie _rectangles instance varial>le to 
the new array, we loop through all rectangles and stop ol>,serving 
them. And once we set die_rectangles iastance variable, wc 
Sturt observing all these reciangles. Finally, we update the 
change count, as we did earlier, so that adding and rcanoving of 
rectangles i:aases the change count to incTement. 

We have one final detail to cover in our program. If we 
open a saved document we still do no[ propc^rly mark ihat ihe 
dociimeni is dirty after modifying a widdi or height. The 
problem is tlial our readFrouiData:,.. methcKl is setting the 
_rectangles instance variable directly, lliis by passers our 
setRactangles: accessor, so we never start to obser\^e tlie 
saved rectangles* Tlie solution i.s to use the setter l:^y assigning 
via property dot notation: 

- C BUOi) readFroniData; {NSOala *} data 

ofType:(NSString *)typeNam^ 
error:(NSErior **)outError 
i 

self.rectangles = LNSKeyedUnarchiver 
unarchiveObjectWlthData:data]: 

return YES: 


Reinemlier, using property dot notation is the same as 
calling the setter methrxl. We Ye not ffiiite done, yeL The setter 
marks the dcK:unient as dirty, wliich means tlial a document will 
lie immediately marked as dirty after opening. This is not 
desired, so the liest way is to set the change c()unt u> after 
setting the rectatiglus property: 

• (EODL)readFromDatai(NSDaia *)data 

ofTypa: {HSStriiiig, *) typeNajne 
error:(NSError **)outError 

I 

seif *irectangl^^ ■ [MSKayedDnarcblver 
iinarcblVe Obj ec tWi thData: d ata ] : 

[self updateChang€Count:NSChaTigeCleared] : 

return YES: 

I 

The NSChangeCl eared argument to 

updateChangeCount: causes the change count to lie reset to 
zero, and thus marking the document as clean. 

At this point, our application now properly tracks the 
document state. If we edit any widdi or height, it triggers a KVO 
notificaiion, which in turn updates the change count. If w^e add 
of remove a rectangle, it also triggers an ufxlate to the change 
count. Note tliat saving a dtK;unient or reverting to saved 
automatically sets the cliange count to zero and marks the 
document as clean. 

just het'ause it work.s, however, dex^s not nierm we canntit 
impnive things a bit, Tlie one is.sue we are going to Fix is the 
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fact that fhe setRecangles: seller is iLsed even if just u single 
recian^^ie is added or removed. 'Fliis is fine if tlie number of 
rectangles in our anay is small bui ii am become a problem, as 
tile army gets larger. While fm not a big fan of optimizing before 
profiling fa lecliniquc to find slow [portions of code), I'm going 
to show you how you could alleviate the problem if you need to, 

Indexed Accessors 

Instead of the array controller pa.ssing a w'hole new array 
every time a rectangle is added or deleted, wouldn't it lx." niee if 
ii could lell you dial a single reciangle has been added or 
deleted'" It turns out that KVC already lias the answer for us, and 
w^e just need to use it. 

Most pR>perties represent a single value, for extimple the 
width of a rectangle or the name of a person. Because it is a 
single value, it is also known as a to<me wktHombip. When a 
property represents multiple values, as is the ca,se widi the 
"reaangles"* pro]>erty of our My Document class, it Is known as a 
fo-mnny relatiofisbifh This is because for every one 
My Document object, there arc many recLangles. For to-one 
relationsiiips, tlie standard KVC method naming convention of - 
<key> and -£iet<Key> w^ork just fine. For to-many 
relationships, there are optional metluxls you can implement lor 
more cfficienl iKdiavkjr calkxl imlejcerj ucct'ssors. On tiie getter 
side you have two new' indexed getters: 

-counLOf<Key> 

•obJectln<Key>AtIndex 

Tliesc* two methods allow you to get the numlxm of objects 
in liie tO”m;my relationship or a single object without having to 
fetch the whole array, Here’s how we would implement indexed 
getters for the ’‘rectangles” [iropeny: 

- {WSllItitftger)countOfRa£tangles 

I 

retT;rTi Lrectangi^-B cotiiit] ; 

I 

- * lobjectluReGt^nglesALlndex: F*gt»r)indi?x 

I 

o-o-m inglcD ob j PCI At Index ilndeit] : 

I 

We implement tliese using llie arrays direa access API. 
While these are nice, it does not really help us with our problem. 

ITie are also rwo indexed accessor merhtxis on the setter side: 

-InsertObj ect:in<Key>AtIndex: 

- re[noveObjectFronj<Key>AtIndex: 

Again, to implement tJtese for the “rectangles" property; we 
would use the array API: 

- {vdlipinsprtObJect: ! I ‘Irect.ingle 

inRectanglesAtlndex: [liSUIntegi&r) index 

L_trecTangles ltJBertDbIect:rectanRie atlndax: index] r 

1 

(vMidJreuioveObjectFraTnReciariglesAtIndex; (XSUTntPgef) Index 
I 

Lcectan^les removeDbjectAtIndex:index]: 

1 


The MSArrayController is smart enougli to use these 
methods to add or remove a single rectangle, if they exist. Of 
course, these methcKls still do not update the change count, tjut 
that’s easy lo add. We must additionally make sure to start and 
stop observing the.se reaangle.s, as well: 

- (void)in3ert0blect;(Rectangle *)ret tangle 
1 nRectanglesAtTndex: CfiSaintf'ger)index 

I 

[gelf sr^irrObservlngRecrafig] e; rectangle]; 

Lrectangies insertObject:rectangle atlndex:index]: 

[aoir updateChangeCount :tjSChangeDi[>ne|: 

I 

- (void) reiDOveObjectyroniRectanglesAtIndex r (^^SUlntege^)index 

I 

Rettangle * rectangleTaRemove = Lrectangles 
objectAtliidex: index] r 

fself stopObservlngRectangle:rectangleToRemoveJ ; 

Lo ouvgler rewoveObJectAlIndex:index]: 

[seif updateChangeCoimtiKSChangeDonej : 

f 

And voila! With two simple mctlKjds, w^e have optimized 
.sellers wliile keeping the ability io ujxlate the change count. We 
.still want to keep the setHectangles: method for replacing 
all rectangles in one aill. Tliis is liandy w1u:n opening a 
dtxiiment, for example. 

One nice thing about indexed accessors is that it allows you 
to implement tomaiiy relationships without vising an array 
internally. While it certainly is easiest lo implement indexed 
acces,sors with an array, you are by no means required to do .so. 

Undo and Redo 

While changing tlie document statu.s is a good step towards 
making our application a sumdard OS X appliaition, users also 
expect support for undo. Undo is liandled in Qiaza by a class 
named NSUndoManager. Its puipuse is to hold the list of undo 
and ledo aaions. and then perform tliese actions wdien the user 
invokes Undo or Redo from the Edit menu. 

In order lo understand hoW' undo works, we need to dig a bit 
deeper into Objective-C method dispatching. A few' articles back, 
we talked atioiit selectors and henv to use them to send messages. 
Say, for example, we have a Person class watli a metliod to set 
the name: 

- [voitbsetHame: (SSStrir.g *)naiter 

You ty[iiailly call tills method using the square bracket symtax 
witli w hich you are now' very' familiar: 

[person setNaoe:f''J'je''I: 

llemember. the seleaor is the name of the methcxl. including 
any colons, in this case “setNanivi.*’. To call a method wiili its 
.selector, you would use one of die performs el ect or: methods 
pravided by NSObject. llius. an alternate way to call the 
setName: method by using its selector is: 

[person performSelecion • t e vo t ( ho tRaffle:) 

witbObject;#"Joe"]i 
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Hiis kind d' incilK>d calling* Ls dymmnc di^kh 

Ixx^inse the seleaor and ar),T.iinenis can txr changc-d ciynamic^lly 
at aiiitiine, instrati of statically at compile tiine. As wc also 
cILsciissed rarlier how Gx-(ki uses dynamic dispatch to invoke the 
attions of controls* such as wlien a user presses a button. But the 
nice tiling alxmi st^lectors and dynamic disp^itch Ls tluil you liave 
all the cumjxjiienis you ncxxi to have a sort of freexe'Clried metliod 
c’all. You c':m s;ive llte taj>icl. seleclor, imd ai^ruments in iasiance 
variables, for example, and then invoke the niellitxl kiier* 

While the pe rfornsSelector: methods provided by 
NSObject are very nice, they clt> have some limitations, for 
example* yiau can only pass u(> to iwo alignments and the 
arguments anti return values must fie Objective-C objecis. You 
cunnot pass j>riniilive afguinenis or get primitive reaim ralues. Ft>r 
that. )xm have to firing out tlie f>ig guns: NS Invocation. 

NSInvocat ion is a class that encapsulates an entire tiieiluKJ 
cull, the target ol>jccl* the selector, and all the arguments, ti can 
nlsti handle primili\'e ty|X"s. Tlie downside Ls that it Ls a bit of a 
pain lo use. For example, let's .say we wanted to set tlie width of 
a Rectangle using NS Invocation. Remember tliat prujxmies 
also geneiute setter and getter tiietluKls, *so we tun use the 
sctWl dth: selettor to set the width pmpert\\ Hcvcs die axk*: 

SEL selcctoc “ i r [seiWldchi): 

NSMifthodSigriatur^ * utgnai iirp ^ 

[roctiingl^ TuetliodSl^naLureForStilector :s&iettor]: 

NSInvocation * invocation “ 
fHSIn vnr.il 1 nil 

invoctitionWithMetliodSlgnatiire:Btgnaiiire]; 

[InvociitlDii selTargtit:rectangle] i 

[invocation setSelector‘selector ]t 

float rtcuWldcti ** 30.0*, 

[invocation sfitAtgunentatTnclexr2J: 

[invoc a tIon t nvoke J: 

Don't wony' afxnit fully undexstandmg tliLs axie. Yes, tlie 
newWidth aigiiment tv atlually the stxond argument, ilie Ursi 
tw^o argumenLs. 0 and 1, aa* alw'ays set to the target and selector, 
aspctlively. 1 just want to quickly inmxluce the NS Invocation 
dijc'ti* If ytJti wunt to full undersfand it, please consult the 
ckxiimentation. 

Tlie ausf>n I bring up invcxutions is iliui NSUndoHanager 
uses them under tlie htxxl ti> implement undo and ado actions. 
In fad, it keej'^.s a stack of inv(x:altons hjr Ixnh the undo and redo 
adion.s. Say we Ye .starting with a new', clean document and we 
add a new' adangle and c hange the width to 30, from tlie default 
of 15. 1 leie is the list of actioas the user performed, in order; 

Add a rectangle at index zero. 

Set tlie width of redangle at index zero to 30. 

In Older to utido these operatt(>n.s* we must perform their 
inverse adions in reverse order: 

Set width of rectangle at index zero to 15. 

Remove rectangle at index zero. 

How do you do you add actioas to die undo manager in 
code.^ Tlica are tw^) ways. If you have a simple metlxxl witli only 
a single aigumeni that i.s an Objective^C type, you can use 
.seledors: 

fufidoHatiager reglstertlndoWl thTarget: person 

selfici'orjSai^IccLfJT (liatNanie: j 
ob]ect:&''iDe‘'] ; 


However, if ycHi need to use primitive types, then you need 
to u.se the NSInvocation variant. Thankfully NSlIndoManager 
allows you lo do thLs without going thitmgh the wimie rigmarole 
of creating an NSInvocation olijed. Here's how you would 
cTe;ne an undo action to sc‘i Lite width of a rt'dangle to 15: 

I [utidtjHaiiager prepareWithlnvoeAtlonTarget: rectunglt?] 
sfitWldrhilS]; 

Note tliai even though this kx>ks like it is adiially chilling 
setWldth: 15, it is only creating an invocaiiun for tills inetlicxJ. 
NSUndoManager Ls using S(HTie dtx.p Olijective-C magic to turn 
w'har kx>ks like a re^al meiluxi call into an NSInvocatian. We 
doni need to concern ourselves with Imv it does it (it uses 
forward Invocation: under the covers if ymi do want to learn 
more), w^ just need to know' that propareWlthlnvocation: 
atkLs an invtKtition to the undo stack. 

Adding Undo Support 

N(wv that we know' liow' to add aaions to die undo manager, 
we can .start mexJifying c>ur cxxle tor undo support. We just need 
to tiKxlify every case vvherL' we insert or amxwe a rectangle or 
cliange tile width or heiglit of a rectangle. Tluinkfully we alteady 
went ihrough the prexess of identifying these locaiions for diny 
dtxumail sujijxm, and this will help tus add undo support. For 
example, to add an undo action when a rectangle is addexi, we tun 
use our indexed accessor: 

' fvrild) InRertObjeci: (Kocit^iitjile Drectanj^Xe 
InRectanglesAtlnd&x: (NSUlnteger) 

I 

HSUndoMiiDd^tir * undoHanj^ger " fself undoJfanager]: 

f f und oMii till get p r epa i oW i i ti I n voc a t i onTa t ge t: I f ] 
removeObjectFromRectanglejiA^Index: Index]: 

If 11[ufidoM^nager isUndoingJ) 

fundaManager s€tActloilKatte:#"Add Rectangle"]; 

srartObseEvlTigR.ecTangl&: reel angle]; 

t i user I Object: rectangle at Index; indexi: 

I 

Tliis requires a bit of exfilanaiion. First, we get an undo 
manager from self. NSDoemnent pmvides sefxiraie undo 
managers tor eath dcxunient. so each dtx'umem has their own 
undo and redo stack. 

Ihe next interesting bit is tluil we can set tlie name of an 
aaion. Hits shows up in the Edit menu to provide tlie user wiili 
more context alxrui a p:irLicular undo aciion. So iasread of just 
showing Undo it will display Undo Add Rectangle. The only thing 
to Ix.^ aware of Ls tbii you set the aaion name tifier adding an 
actiun to tlie undo manager, not before. 

And fmaily, w'e no longer need tt? update tlie change aninc 
Hie undo manager takes care of managing the cliangc count for 
us* 

We now' need to add undo support to die other rectangle 
setter methfxLs, in a similar fasliion: 

• <void )rcinovcObjecLFroiiiRectaiigieaAt Index: (MSLIhii eger) index 
I 

Kerianglf * rectangleToHeniove * l_i •><: tanaies 
obj ec tAt Index tindex]; 

WSIndoManager * undoManagec = [uflf undoManager]j 
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[[undoMana^er prepareWitlilnvocailonTarget‘self] 
iaaertObject : trectangleToRemove 
iBRectanglesAttDdex:index]; 

if {! [undoManagcr isUndoing]) 

[undoManager setActioaKaweri^^'fteBiove Rectangle"]: 

[self sttjpObservingRectanglejrectangleToRemove] ; 
Lrt?(‘*'isr>gle£l renraveObject At Index-index]: 


- (void) setRectsnglsE^ CHbltutaijleArray *)rectangles 
[ 

if (rectangles = _rectangies) 
return: 

For (Rectangle * rectagle in rectangles) 

Fself stopObseirvlngRectangie: tectagle]: 

l^SUndoHanager * undaHanager = [Keif undoManager]; 

[tumluFlunager prepateWitblnvqcationTarget:seif] 
setRectangles:_teetfiijglesJ: 

cectangifis “ [rectangles copy]: 

fot (ftettangle ‘ rectagie in _rectangles) 

[self etartObservlrigRoctangle:rectagle] ; 

1 

Wt‘ hasiailly replaaxl i!ut t han^c count adls with undo action 
registration. Earlier in tills article, wlien we reset tlie change count 
when tile document Is kxaded. Now, we want to do the siime 
tiling, but this time, we want to remove all actions {nnu the undo 
stack: 

( readFrainData : (HSDatfl •)data 

ofType:(ttSString *JtypeName 
error:(SSEircc '*)outEitor 

I 

spI f, recUngles - (NSKeyedUnarebiver 
unarchiveObjectWi thila ta; data]: 

NSUnduHar.^iger * undoHanager = [salt undoManager]: 
[undoHanagfir removeAIlActionsJ: 
ret-inI YKHt 

I 

Tile Iasi detail is being able to undo individual edits. We used 
KVO Uj watcli for changes to the width and height of eacfi 
rectangle, and we cin use KVO to suppon undo as well. Tlie ba.sic 
plan of aibick is to ase the KVO notifiaition to add an undti action. 
Tlie only paiblerii is die KVO notification happens after the key 
path value lias changed, if only we could gel the jiieviiius value 
of the key padi.., 

IL turns out KVO lias this capability. We do have to slightly 
cliange die way we start obser^dng objecis. Remeinljer when we 
sc^r the KVO options n? 0? We aie going to iiiodily that to use die 
N S Ke y V a lue Ob s e r vi n gO p11 onO 1 d opli on: 

- (voidIstartObfiervingRectangle:(Rectangle *)rectangle 

I 

[rectangle addObserver:atill 

f£)rKeyParb:^"width” 

options:NSKeyValueObservingOp LlonOld 
context:AkReetang]eEditContextl: 

[rectangle addObeerver^s^Jt 

f 0 rReyPa t b: ^' hel ght ** 

options:NSKeyValueObservlngOptlonOld 
context :6klter I angleSd it Context]: 


Tills tells KVO to supply the old vtdue with the KVO 
notification. Our KVO notiheatiQn callback meiliod am now use 
dial to add an undo action; 

Cvoid)t:hangeKeyPatb: (HSString *)keyPath 
ofObject;(id)object 
tnValtip: lid] value 

I 

lobjpcL setValue:value fotKeyPathikeyPath] : 

I 

(void)observeValueForKeyPath:(NSString OkeyPatb 
afObjett:(Id)object 

change:(NSDicLlonary *)change 
context:(void *)context 

I 

if (context — iikKec tUTigleEdltCantext) 

I 

?d oldValue = [change 
objeetPorKey t NSKeyValueChangeOldKey]; 

ItSUndoKanager * undoHanager = Iself undoManagerl: 

[[undoPtanager prepareWlthTnvocationTarget:8eifl 
changeKeyPath: keyPath ofCibject: obj ect 
toValue:oldValue]: 

[undoHanager se t Ac tionNaine;®?" Reel angle Edi I "]; 

3 

else 

1 

[super observeyalueForKeyPath:keyPath 
ofObject:object 
change:change 
context icontext]: 

1 

] 

Tile change diaioniiry ctintains the okl value. We use this, 
plus the key Path md object to register an undo action. It uses 
a lielper iiiediod tJaii sets a value u.sing KVO KVO^ likt‘ KVC, w'ill 
auttnnatically tX)nvert primitive number values into KSNumber 
objects. By using KVC. we also can sfiare the iniplenientatiun for 
lx)th the width and height protx^rties. 

Conclusion 

At this |X)int. you ,should have an applitiition wiiii full dirty 
dtxijment and undo .support. Yonr mevs will greatly appreciate 
die extra dh m you've made foi^ dlls bit of i^ ili.sh. If you are tiaving 
[rouble getting this all working, downlotiti tlie aeajmpanying 
projects from the MacTeth wdisite. 

I 
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What Is Code Signing? 

So you're a conipiiter And ytyuVe not happy executing just 
any old sofm^are. No, you want to only run sofmare that has 
bt*en approved hy someone you trust, llow can you. the 
computer, tell the gtKxl from the bad? 

Deciding what sofmiire can l>e alk>\\x*d to execute is a 
need that crops uj> in many places these days. An operating 
system might want to grant misted privileges only to drivers 
iliai are kntnvn to come fmm a trusted source. A user tuighl 
want to \^erify ihai software they have ckm'aloaded from a 
vendor has not been modified, or that they are not iTt'ing 
tricked into divwnloading something with a misleading nattie. 
Or, a cell phone manufacturer might want ui retain the power 
to pre'apj>rove every apf)licaiion that runs tin their device, for 
sc'curiiy or business reasons. 

Ct)de Signing Is simply a way for a computer \o check out 
an applicalion, a driver, or other chunk of cotle to verify that it 
was “signed"* by a particular vendor, and thitt the code has not 
l>cen modified ulmv it was signed. Cixlv Signing is aj)[>licd 
primarily to st^i'uriiy and digiuil rigliis management efforts. 

Overview of Code Signing 

Ingredient 1: One-Way Hash Functions 

Ctxie Signing recjuires a one-way hash function and a 
public-key encryfuion infrasrrucaite. A one-w^ay hash function 
simply takes a stream of b\ies and calculates a small “digest" 
that uniquely represents the stream of l>yles “ similar to a 
""checksum", but much more secure. A digest is r>*pically 32 
bytes or less, a nice, small, unique representation of any 
arbitrarily si;^ed chunk of bytes, A gexxi one-w-ay hash function 
can create a unique digest for any sequence of byies, with a 
very small probability of a “collision", or any tw'o sequences <if 
byaes generating the same digest. By “very' small probability", 
w^e're spe;iktng in cryptugrapliic terms, w'here it w'ould take all 
of the computers on every planet hundreds of titoLis;inds of 
eons to calculate another sequence of bytes that reduces to the 
same digest (give or lake a few* Imndred thousand eons, 
depending on tlie hash function and w^hether or not it has 
recently l>een discovered to be weak). 


Ingredient 2: Public Key Encryption 

Hie second tequited piece of the ccxle-signing puzzle, 
public-key encryption, provides a bit at' useful magic. I can 
generate a pair of key.s, c^alled my ""private" key and my “public" 
key. My private key, which Ls always ktpi secret and accessible 
tally to me. can lx* used by me to encrypt a cltunk of data. Anyone 
w itii my public key am then di?t rypt it. At lltsi, tliis sounds a hit 
ust!les.s - why would I w^ant to ennypt something that anyone else 
in the world can decrypt? l1ie gieat thing is that this data I have 
enciypted can only l^e deciypteti with MY public key. Thi.s is liie 
Ixiiiity' of tiigital signing - if I enciypl a 52 byle digest with my 
private key. you can grab my public key fiom somewliere and 
verify whether I dk!, in hict, “sign" that 32 byie digest with my 
tiiivaie key Nobtxly else nin sign a digest and claim tlial it w'as 
done w iih my private key. 

Digital signarures am lx chainc'd together in a very 
convenient w^ay. In the examfik* alxwe, I have signed a 32 byte 
digest w'iih my private key, atid I am asking you to verify’ it with 
my public key. Vthere do you get my public key? How^ do you 
know' the entire key pair wtisn t cnratetl by someone else claiming 
to lx* me? In ev'trry' code signing system, there is a party* wlio holds 
a “nxit" private/pLiblie key* piir. 'lliat (.'ertitlcate Authority is 
res[ionsible few verilylng you are who you say ytm are. Tlien. in a 
bit of digital signaium awesomeness, the Certificate Aiitliority irses 
their rexx privare key to sign VOUk public key along with a brief 
bit of text explaining who you really are. Thus, atiyone who lias a 
msXix\ copy of the r(K>r public key can validate tliat your public 
key' really Ixlongs to you and tliat it Ls “approv^ed" by the 
Certificate Authoiity. (in reality; there are ak> “intennedtate" 
certifiaites used by* the Certificaie Aitthoriiy liiai can Ix changed 
out if needed, for example, in case the intermediate certificates 
private key is accidentally disclosed to an unauthorized jxirty). 

Ihis public-key* infrastniaure allows a Ceriific^ate Autliority to 
control who can sign code, and it aIlow*s end-user's computers to 
valicbite a chain of trust. If we aimbine one-w^y hash functions 
with public-key' inffa.Htrucrure used tf> emate digital signatures, we 
can do a pretty* g^xxl jiJb of verifying tliat an application was 
signed by a party that has obtained a certain level of trust with 
die central signing authority. 
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Code Signing Step By Step 

Un's say Alice Ls writing an application for a cell phone* and 
she is recjuia^tl to digitally sign the application ljeft>re it can Ik* 
dlsiributed. In (jfiicT for her digital signatum to Ik tnistecl, she 
must first fuive a mlaiioiiship with the entity that Ls ret[iiiring the 
digital signature (lets call this entity BliielKiry, Tnc.) Alice first 
generates a random publie/privute key pair, using her persomil 
ctanpuler, and also generates a Certificate ^signing Request that 
includes her klentilying information, such as her name, her 
company name, lier website address, the adda^ss of lier office, 
etc. 

Bluebeny, Inc. is given the public key and the Certificate 
Signing Request. Alice gels a phone call to verify llial she exists* 
some cfiecks are made on her iKher information, and she pays a 
fee, liluelKtTV^ lias their own public and private key, and they use* 
the private key sign Alice's pul)!ic key and Ccnificaie Signing 
Rc<|uest in a way that anyl^xjy can then verify tliat Alice's public 
key does, in fact* lielong to her. 

Now, Alice can use her private key to sign an apfdrcalion she 
makes* Instead of using her private key to encrypt the entire 
atijilication. she simply uses the one-w^ay hash fund ion \o cresUe 
a digest of tile appitailion, and then signs tlte digest witli her 
private key. 

Carl* who has a Biuelierry cell phone, would like to 
download Alice's appliattion. But Bluelieriy; Inc. ha.s det lartxl that 
their cell phones will only execute C(Kle that I ills iKtai signed by 
an authtm/.ed certificate. 


At this point, Carl doesn't need to df) anything to verify tJiat 
the appliattion c^ame from Alicr. He dtKsri't even have to Ik 
online for fiLs phone to verify the validity of the application. 

Carl's phone \vill use the same one-w*ay hash functiem tliat 
Alict' used to creaie a digest of the applioition. It will tlien look 
at the signed digest tiiat Alice included with her application. Carl's 
phone will haw a master copy of Bluelierry, Inc.s pufilic key tluti 
Blueberry put on the phtine when it was made. Tlie plione can 
check to see if Alices [loblic key is valid (it was signed by 
UluelKrrys private key; so it will check out ok). Tlie phone can 
then check to see if the digest that Alice signed matches die digest 
that the phone computed. If the digests match, then it Ls 
reaMinable to ajnclude that die application has not been 
modified, that it has come from Mite, and that BluelKny' has 
verified that Alice is trusted enough to lie signing applicatinas. 

An additional step can Ik added by BluelKrry, Inc, if iliey 
want to appmve eac'h of Alice’s applicatjoas individually. 
Rlueberry^ can retjuire that the ap[)licutjon signature added by the 
developer Ik signed one final time liy Blueberry'* nii.s way, Alice 
can’t pyblislt □ new uppliaitiim on liluelKtry^'.s system widioul 
Blueberry's final appn^val* 

Terminal Reality 

Mat* developineni tools are generally leased on BSD 
comtnand-iine ttxiis with nice friendly GDIs on top* XCode, fE>r 
exampie, Ls a really nihy; aisy ro ust' GDI lhai relies on die GCC 
compiler tcKilchain. 

For code signing, there is a command line tool called 
‘"codesign^ Wlien y't.iu set up axle .signing in XQxle (in tlie 
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Meet the world’s smallest color duplex scanner designed just for the Mac. 

With a footprin! that’s half the size of a sheet of paper, the Fujitsu ScanSnap S300M will cut your workload—and your desktop clutter—down to size. The 
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Professional, Fast. Dependable 


“Cocte Signing" section f)f iht* l^uikl sellings), ytni are really jiLsl 
specifying ilic inkmnution ihai XCode needs to execute 
codesign. In fact, if ymi look at tlie iTiiild tninscripi in the Build 
Results window alter building an apf) wiili nxie signing set up, 
you'll see tlie cxiicl onuiuand that XQxle used to do the code 
signing. 

codesign enn also be asetl to get inlbnnaiion alx>ut ilie 
validity of a signed app. Tlie **—verify” ojxion of codesign will 
check to see if a signaatre exists, and wlietlier or nor it is valid, 11' 
ev'erytliiiig checks out ok, codesign r 1 f y v\mI 1 say ntxhing 
(or, if you provide a vertK>se'' ijjxion. it will teport "valid on 
ilLsk"). If tlieie is no ,SLgnaiua\ it wilJ tepon "axle abject Ls not 
signed*’ (or pcxsstbly some other emir), wiiich Ivasioaily means it 
can't tind a signatua^ to verify. If tliea is a signatuti* IxJt soiix^tliing 
has Ix'en modified, code sign will report "a .sealed resource is 
missing or invalid", meaning the liasli ol what you luwe dex’s not 
march tlx* hash of what wus tMiginally signed. 

if you would like to know some iiifonttation alx>ut who 
signed an application, you am use the "-details" option of 
codesign. ITie —details option tan lx used wiiJi varying 
levels tjf veiixjsity, ;md will si low you who signed the app. altmg 
with stmie details of the application Ixmdie. Ux>k lor the lines that 
.start watli the woid “Auihtirity':" to stx what cerdfiaites were 
involved in the signing of the app. 

Lets try out code sign with an app signed by Apple: 

listing 1: Verifying a Signed App 

codesign —iferify 

.All of Apples applicatioas shipper! with Mac OS X are signed 
by Apple. You cm verify a digital .signature using die codesign 
commiintl. 

X cd /Applications 

X codesigri ve r Lf y vo rboso Ha H »app 
Mall,app: valid on disk 
% 

Now let*s get .sonx details alxnit a signed app: 

Listing 2: Details of a Signed App 

codesign —details 


You can get details alxnit who signal an app using 
codes! gn. *nie lint^ Ixginning wiifi ‘‘Auihoriiy" show the chain 
of certifieales lliat was u.sal to sigji the app. ’l1iLs partiojliir app w as 
signed with a ceuificaie ailleti '‘Sofrwaa^ Signing". Tliat certificate 
lias Ixxn signal by an intemialiate certilitTiie called ""Afijile Q)de 
Signing Certification AuthiHily", and in tum. (flat inteimediate 
certihaite has Ix^m sigiKxl l^y “Apple litxx C^A” tlie c’erttficaie that 
is at the nxx of Apple's inrtmtl trust chain, 

Tlie denails ciplion will not sliow very much information 
unless you tell it to lie veriiose. Here, wc liave added vvv” to 
kick up the verlxisity to get all of the detail.s. 
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% codesign -details -vvv Kail.app 

Ex ec u t able*/Applicaiions/Kai1.app/Content s/Mac OS/Mai1 

Id etit if ier*^ om * apple. mal 1 

Format-bimdle with Mach-0 universal (il86 ppc7400) 

CodeDirectory v«20001 size^H67^ flagsrOxO (none) haaties«728+3 
locfltlon”e«bodded 

CDHflsh=49a4001b87afl7822b4834fifb6274f79f3b62f76 
Signature Else*"4064 
Authority*Software Signing 

Authority-Apple Code Signiiig Certification Authority 

Authority“Apple Root GA 

Tnfo.plist entrles®27 

Sealed Resources rules^ files=*525 

Internal requlreroentB count*^ sise^l2 

% 

Now let’s try it with a ini party app tJiat is uasigned: 

(rqilace “kdiir3.app'’ widi sf)TTiething yoti haw iastalled) 

listing 2: Checking the Signature of an 
Unsigned App 

codesign — i^fy 

Apj>s on Atic OS X do not Rx^uire a digital .signature, and most 
3rd party nppliatioas will not li;we one. If y(ni try to veniy a digital 
signaiiiR on an uasigned app, codesign will simply tell you llial 
iIktc Isn't a signature. 

% codesign -verify kdifO.app 
kdlffl.flpp; code object ia not signed 
% 

It is also worth nientionuig anotlier Loiutnand lint‘ r(H>l, 
"openssit We have alre^idy discmsed ^'Keychain Acress", the 
very ea.sy-tt>use GUI tool ineludetl to help ca^itte and nuinage 
digital signing a^rtificaies. If you’ve ever had Uj get an SSi tvnifitate 
<3r n:jtlly anything else involving ceriifiaites. you ve i>n>lrahly nin 
acTtJss opens si. 

If ytxj evrr take a step ouLside tlte World oF Apple, and ntxfd 
to work with digital certifioites, openssl Is your Friend. It can 
convert a.HilltiUc's fnmi cme fVmnat to another, it ciin caatc 
certificate signing requests, and rnudi much mort'. It dex-s sea much, 
in kici. lhat Td rtxtimmend ntx worrying um much alxmi how- it 
work.s until you necxl i1. IF someone needs you to do Mjnieihing 
wath openssl, tlieyll likely \uw a siep-l)y-stt'p walkthrough ot 
whai you need to do teady to go, and if noU its usually aisy lo 
gujgle u() what you need. For example, il you are purchasing a a 
code signing ceitifiaile from a CerlificaLe Autliority, ihey'll have 
instnidions hrw to use openssl to generate everyiliing they 
ncx.xl fnjni you. 

And, in sujx^r Mac OS X cx>nimand-[ine gtKxlness style, 
openssl Ls alrtxidy on your mac. If you want to dig in, just typt^ 
“man openssl'' and tt-ad awiiy. 

What is a Certificate 
Authority, Really? 

If you want to digiuilly sign your Mac aj)ps, you'll nmi to 
purcluusc* a c<xle signing cefTfate from a Certificate Authority. 
Tliey will verify tlial you are w^ho yf>u say you are and issue you a 


tcrlifitiite iFutl is signed by them, llus puts you in tile "mist cliain" 
that can be verified by die root certificates ineludetl in Mac OS X 

Certificate Audiorities cliaige a few hundted dollars per year 
for axle signing certiFk'ates. Ibey can hit you up each year lxx:ause 
your certificate is issued to y<xi wiih an expiration date, if you sign 
code after that expiration date, t!ie signature wall n<x be exjnsidered 
valid. Gfxle that you signtxl liefore the expiration date will .still lx* 
considered validly signed after the expiratirm date, but you just 
wont be able to sign miytltitig new until you fork cjvct the renwal 
fee For ytxir signing certificate. 

Mac OS X Mjppt)rLs code signing certifiaites issued from a 
numlier of well known C^ertifit'ate Autliorities. Oll ier platform.s may 
retjuire code signing certificates from a single stiurce - for example, 
you cant purchase an iPhone cfxle signing c'ertificate from anyone 
hut Apple. 

Pros, Cons, and Basic Realities of 
Code Signing 

Pros of Code Signing 

If we lived hick in the gjory^ days whea* ii .seemed every^ 
pnigramnier txHjId lx* tnistetl noi to do anything nialidtjus, axle 
signing wouldn i k- as witk'sprt'utl ;is it is nrw. these cktys, it is 
lt;indy to have some way lo figua- oui wlio wrtxe the exxie that is 
running on your a.)mputer. and wlieiher or not tliat axle has k-en 
nuxlilicd. 

OjXMuting sysleiiis ran use* ctxlc signing lo validate its ow'^n 
sul">sysrems. A seaia^ ujXTating system can use signed ccxle to 
grant sfxx ial privileges - for exam (lie, a signed \'iilcx> driver can k* 
given access diaxily to a vidt*o tual, w'hile all oiher sciftwaie would 
ntx have tiiat access. Hie ease of validating signed cxxle via the 
signer’s public' key makes tills apfinxich vc^ry up[iailing, and it is 
used in Mac OS X as well as other major opeoting systen^ to 
easuie tliat noIxxJy can di.strikite fake or altered system .sofm^re 
updaters. 

Cons of Code Signing 

Cixle signing, iiowever, am also k* used to prevent uwrs 
from executing software lhal they would faherwise choose to 
execute. Most o]X*ruting systems allow users iti choose to 
execute unsigned code, but on stane platfiiniis, fiarlicularly cell 
[ditmes and video game con.soles, ctjcle signing is enforced. If 
an application is not signed by an af)proved developer, it will 
not be ailow'ed to run. In the case of cell phones, this 
enforcement is usually done in the name of security, but in 
some cases, for example video game consoles like Ninrendos 
Wii, and Apple's App Store for the iPlume, it Is also done for 
Ixisiness reiLsons, We haven’t .seen this type of enforcement on 
desktop machines, liu( well see pleoiy more of it on future cell 
phones and other sy.stems. 

Basic Realities of Code Signing 

*rhe reality of code signing is that il is one UkjI in a 
t«M>lbox, and it is not invincible. Often, unsigned cede can be 
given lull access lo a txanputt^r wath the click of a “run it 
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anyway" buiion thut cnd-uscrs arv all tckj willing to clu'k, or via 
[he entry of a root password that users are all to eonifortal>le 
entering when asked. Code signatures at a system level are 
validated by the system iLself, s<) if the system wius previously 
compromised, it could tell itself to allow any code, or code 
signed by a rogue party, and the end user would never know. 
,\nd systems that strive to prevent end users from nmning 
unsigned code, like cell phones and video game consoles, are 
constant targets of hackers w^ho go to increasingly astounding 
lengths lo take ihtxse restrictions away. 

Also, It is important to note that signed code says nothing 
about what the code actually does. A code signature only 
assures that tlie cotic was signed by a particular chain of 
certificates. The ccxle itself could still lx malicious in some way. 
!f the central signing authority* has tens of thousiuids of “trusted" 
entities wlio can sign code, odds are there are going to be 
varying levels of trust there. U is even po.ssible for a rogue 
employee to sneak malicious ccxle into an application wiihcxit 
their employer's knowledge, then the employer signs the code, 
and the malicious code makes it out the dcx>r with a genuine 
signature. Bec';iuse of these simations, code can still lx* run in a 
'"sandixjx'’ that prevents access to .sensitive parts of the 
t)|X'raling system and file system. Ode that is signed for 
security reasons, like drivers or system ujxiales, must gcj 
through a tew layers of trusted internal audit Ix'fore it gets the 
final digital signature. 
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Get Used To It! 

Code signing is here to stay. For end users, it usually 
w'orks behind the scenes, and theyll never even know' it’s 
there unless something goes wrong. For developers, 
however, code signing adds anolfier thing that has to be 
made to work right, and it has business implications that 
need to be understood. 

The actual code signing is done by uk>Is, and lliose tools 
are typically integrated into the developer tool chain, 
auiomaikally generating the digest and signing it after the 
build process is complete. But in this type of environment, it 
is likely that multiple certificates will be involved, depending 
on whether the application is being built for the developer's 
device, for beta tesier.s, or fur final deployment. Keeping all 
of these things straight, and verifying tliat everything is in its 
right place, can l>e daunting. 
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You Can Use Keychain Access Application (in 
Applications->Utiiities) to create a Certificate Signing 
Request 
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A Certificate Signing Request asks for information 
about who will be associated with the signing 
certificate. Typically, the "Common Name" will be a 
company name, or an individual's real name. 
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Hie Key Size and Algorithm used to generate a key pair 
must match the standard defined by the code signing 
authority. 2048-bit RSA keys are common, and the 
default setting in the Keychain Access program's 
Certificate Assistant 

Code signing keys am also have business implications. 
Valid code signing key costs money, so tliere is added cost 
which can l>c .significam, [nirticularly if your app is very 
inexpensive or free. 'I'he biggest business implication of code 
signing, though, is the ptx.ssihiliiy of n(ji being allowed to liave 
a code signing ctTlilicaic. Clearly, code signing is as much 
about allcnving trusted entities to sign cfKle as it is about 
preventing others frt>m signing cxxle. If you think you have a 
business opportunity tm a plaifonn that requires code signing, 
liiu for one reason or anorlier you are unable To acquire the 
appropriate code signing certiOcate, then you simply wotfi l>e 
able to publish your appliailion txii that platform (and perhaps 
ifs lime lu seek out a partner w'ho can). 

Code signing can provide a chain of trust, it can verify 
the original sourc'e of software obtained from untrusted 
sources, and it can give bii.sinesses control over who is 
allow^ed to publish software for their systems. For al! of 
these reasons, cotie signing is here to stay, 1 hope this has 
made clear its main uses, how it affects software developers 
and end users, and how it will become a coninitxn pari of 
software development in the future. 


About The Author 

Stott has been a Mac software developer smte he got his first 
Powerbook in J99L Scott has written anmy apphcalhns for many 
platforms, prmady in the video game iadostry. He anreatly holds die 
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EEK Guide 


Are you asked for advice all the time? MacTech Geek Guides are 
here to help you understand the right questions to ask, know the 
most important issues and terms, and give the right guidance to 
those that look to you for expertise. 


Projectors . 

To project and to serve 

l^rojectors here, [>rujcctors there, projeetors, projecttirs 
everywhere. 

Foi^ve iny lame venie, hut it pRity well sums up tlie 
projector situatiotT A dit/.en-piiis eonip^inies m:ike sjiid de\ici^, 
wltieh eeitainly conie in handy. !iut Ik>w do you know whai 
projec1t)r to huy? Is a pn Rector tl^uUs grejit R>r a sales presctilaluai 
a gcKxJ one for watchinj^ movies? Shoultl you huy a ]x>rrahie or 
stationary model? And wlitit the heck is a lumen anyw^ay? Be 
fxtiieni. Maclech Ls here to exj>kiin it all. 

Weighing in 

Fiist up, let's kxjk ai one o( the mitjor factaui in picking t>ui 
a projector: wei^iit. 11' yt)u’re iiioLiniing a projetior in a home 
iheaier setting or statifjnary office eTUinniineni, w'eight w'on't 
matter tlnil much. If youVe pusliing it frcjrn office to office or 
cla.ssrcKJUi to classroom, weight iKxxMnes more impemant. And ij' 
you're a road v^^arrior, lugging tlie pRjjetior all over \hv aarntr)' or 
around tlie wt)rld, you’ft* going to want a smtiU model. Tlie inosi 
svelte |X)rtahie projectors weigh around ilirttr pounds. 

Resolution 

lx)is of laptops a>me with XCA semns ilic'se dtiys so, for 
those on tlie gf>, a portable paijecit^r makes sense. XGA, tjr 
Extended Graphics Array, Ls an IBM display .standard that usually 
nie:irLs your laptop supports 1024 x 76H pixel rt^jlution or beaer. 
A jjrojeetor with 1024 x 76H resolution Ls juor' tluin udc'qyate for 
PowerPoint Kcytiolc, text presentations and the like. FiK 
pre.sentations and general tiffice Risks, there's little need to spring 
Idr an SXGA iVM} x 1024) projector On llie tilhcr hand unlexs 
money is R'ally tiglit, don't dnip dnw^n to the SVGA (B(K) x 600) 
nHxiels unless yoi»r needs go no furthtT than PtwerlA>iat/Keynote 
.s!idL*s and simple graphic's illirstnitions. On the otiier extreme, 
unices yoti'm into very' high-resoiution woi-ksuition applications, 
there's little need for an t.iXGA (K)00 x 1200 resolution) projeaor. 


by Dennis Sellers 


Few (mxlucis on Lite market Itave this native re.solution, at least as 
compared to the otlier restjlution tjptions mentioned 

Be the brightest in the room 

When you’re axisidering an office projc'cior set-up, ytafll 
need lo factor in the siTte fif the f(x>ni you’re pivseiiling m, die 
scieen size onto which you'll Ixf projecting and lighting 
tcjmlitions. 'the general mie of ifuunb is lo pic'k a projettor that's 
ratexi with 1100 lumens or alxne. A lumen (see, we told you we'd 
explain) is a unit of me:isnrement d' light. ANSI (American 
National Standird Institution) lumens afpmsents the amount of 
light emitted by a light soume. such as a light bulii or, for our 
purjxxses, a pn^jettur. 

ProjecTor Irrightness, tliough one of the most important 
features considered wdten buying a [>rojeclor, is sli)] a 
somew'liat elusive standard. Becau.se the brightness of a 
projector is largely a fiiiKlion of its lamp, lens, and optical 
engine, it will vary from projector to projector, even in 
projectors of the same make and model, or with one projector, 
dejxmding on the age of its lamp. But as a genenil nile of 
them, ifyoifre using a really big screen in a really t>ig rcxmi, or 
arc using it for mare than 20 people, you should give serious 
consideration to a frrojecuir whih at least 2000 lumeas. 

Connections for the f uture 

When it comes to picking out a projector—however 
you're going to In- using it—you1l hac^e a choice of 
connectivity options: composite video, S-video, analog 
computer (or VGA), DVi digital inpuLs and wireless IAN 
connectivity. When making your choice, decide which device,s 
you'll lx using it with both now and—this is the important 
part—in the future. A low end projectcjr w'iili a few btisic 
ccmnectivity options may look like a sweet deal now, but that 
etjuid go sour if you find that, down the road, you need to 
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hook it up to other devices wiili wjudi it's not conipatiblc. 
IHan uiicad. 

Wireless projeaors ;ii'e l>ei’omin^ mort* and more fX3y;>ular. 
Iliere are several lx*nehis. You don’t have to deal vvitl) cables. It’s 
easier to switch fjclween Jiiuliiple computer sources. And 
fpresenters have more tlexibilify in arrant^int; tlieir set-up, 

Iheit* are rw’o main types of wireless pn>jcxtor. W'itli "‘rail 
time'' winelcss poojeclors the [projector lias a coastant link to its 
soLiR’e over a wueless link, llie projector dLspbys tlte stpurce 
im;tge in axil time. With’*uploatr' w-ialess pnijeaors, hies an? 
uploatled tr> tfie yirojeeior over a wia^less link. Hie upk>adet] tiles 
aa later disfilayed by the [inijector .si) you don’t have up liave a 
computer oji hand. 

Which is Ix'ttcT? flere's some advice from the Projetlor Point 
web .site (http://www,pro|eclQrpointxo*uk): “In mosi rastfs. you 
wifi find real time wintde.ss projetiifpn to lie a more useful 
technology. ‘Upluid’ wireless jirtjjecturs are only really usetxil 
vvheie the same jireseutatioii is shown re(iauedly using the same 
[projeetor. Since this advantage is only applicable to a small 
minoriiy (most users, at M)jne jKPim, want to make last minute 
ciianges to tlieir ]>resentatitpn) we would generally nx'ommead 
atil time ivireless captibility. 

" 'Upload' wireless pnijcciors do, lioweven give you tiie 
acJvantage of Ix-iog able to project without a PC. For this lo Ix^ 
useful however, you still need to have ycpur PC within range oi‘ the 
projeaor at s<pme pr>ini, wiieiher it's at your oillce Ixtdre you go 
to a prestmlalion, or wiietlier ifs at the pne.sentation itself. In the 
fonner tuse, ytpu may as well use a aible. In the biUT case, you 
need lo have your PC and piojet'ior in ihe same [pkice anyway, so 
the advanuige is nullifiur 

All-around good guys 

For most of us, multi-use prtpjectfprs, which arc designed 
to handle work presentations ami DVD movie playback at 
home, will suffice, Reas(pnal>ly [priced, these projectors usually 
offer a good compromise of weight and features, l(H>k for one 
with user-selectable screen aspect ratios. Most multi-use 
pnpjectors come with tvv(j user-selectable aspect ratios: i:3 
(.standard) and widescreen (l6:9F The fbmx-r is wliat you'll 
want to use for computer presematioas; the latter is a must- 
have for letterbox movies. 

11 K‘ higher the contnist ratio, the ocher the black aiPjK'ars on 
tlie image. If ytpu’re using your pn)ja:tor for video piiqxjses, chotpse 
one with a high t:oninist ratio lo deliver high quality iiaiges. Digital 
light Pnpjcxtor (DLP) teclinology is typically ftPumJ in multi-u.se 
projeciors Ipecausc it oilers signiHt:tnrly higlier contnisi ratios falxxit 
2(M)0:1) than \CD (100:1), As a rule, DLPs have the best light nurpitt 
of the smaller projector tyjpes. Ibcy have a Ipetter amtra.si ratio so 
get darker blacks and wltiter whiu\s. 'Pfiey have more concra.sis and 
tliey also pnpvkb a mort^ ''lllni'like” image. 

It suq>ri,sc‘s most [pecppie, but if you’re going to Ix" using your 
projector simply for viewing movie.s, a KXX) lumen model will 
serv^e just fine. Why? Ycpu're most likely going to Ipe viewing a film 
in a iktrk or semi-dark mom. In this case, a 1(X)0 lumen pnpjmor 
can cast a skirp image up to 100 inches wide with no pmlpiem. 


Home theater fPitpjetlors also don't require the m^iximum 
restplutitpn trestpluuon Is the numlxrr of dots of light tliai afPixxtr on 
a scTeen or a projection to make up a projected image in a given 
space). IxPis of oitjvie pnjjectors in die ntiirket today are 180p 
mexJeLs; ihey'ie gcxxl enough for DVD movies, TV hrtradiasLs and 
sonpegame constples. Howesxr you’ll pnjlxibly want to invest in a 
higher-nesoliiiitan pn>jeelor if you're into Blu-ray or High Definition 
Telexisi<JO (HDTV) signals, or if you w^int to “futiife-pTtxpr your 
purclia.se, 

though relatively lew [projectors come with wirfe screen 
supfitJTt, tills is the wave of the fiiture, Ben Joy tpf InFtxus s;iys. 
High def video conferenting is Ixx’oming easy to use and an 
increasing annictive alternative to travel with the exist of plane 
tic kets and oil. he adds. 

Living color 

When picking our a piTPjeuor, you’ll want to make sure the 
color cjuality is up to your standards. When you see a 
demonstration of a profeaor, exiimine how each mode! leis you 
change or enhance colors. Are ihvw adjusimenLs for each of the 
major color inputs: red, gam, and blue? And what alxput the 
other a>lon> in the technology palene--<.yan, magenta, and yellowC^ 
Ik: sua you can adjust each of these six txplors independently to 
increa.se the hue of the mkifs intended, without skewmg the other 
colors. Wfiai’s more, a saturation adjustment ran allow tisei^s lo 
.simply intensify ceitain colors more pretisely, bringing iimtges into 
a vivid and vibnmr piece of art, Adjusmients should lx: menu- 
driven and user-friendly so that you can easily get the dt^siaxJ cxplor 
onlfpui quickly. 

)X1iy is color coaslsiency iinjxpnant? Elearonic tlevices such 
as prcpitx'tofs, LCD monitors, digital cameras, laptops, and printers 
usually disjplay colors ba,setl on individual manufadurers’ [presets, 
says James C^han, director of Projeaor Prcxiuct Marketing, 
Presentation Pnxkicts Division, Mitstubishi, This means ilial the 
same color presented on each device (or over llie Internet) can 
kxpk vastly difierent than the actual image. 

Brighlnes.s unlfonniy is also impcprtani, Unifcprmily is ihe 
fx:rcent;ige of brightness airried fnpm comer itp comer and edge 
to edge of your image A higher uniformit\" rating meaas Ipetter 
consisttmey ifmjughoul your image. For the most wasistent 
images, look for a unitbnniry rating of 85 percent or iKTter, 

On the other hand I here's such a thing as tcKP much 
brightness, Ttxp bright a pmjector in a darkentxl rtK>m can lead to 
eyestrain. With that caveat Ix" sure to gel one tliat can project an 
image at the size you 11 need and which will still be bright enough 
to siand up to the am!>ient light >x>u'll normally use it with, 

Yhe roar of the the fans 

You’ll also want to consider tiin noLstr. The t:onsumt humming 
of a noisy projeaor can get old ([uickly. Before purchasing check 
the Fan Moi.se rating. Eacli of the projeaors listed in the Pixpjcxtble 
dauiixisc (ai http://www.projecHde,com.au/projeclDr-guicte- 
choosing,osp) have their Dedlpel ratings listed w^hen publLshed by 
the manufitourer. Tlie average noise lev'el of today's projetitirs is 
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35dB, fiiu if yon am sipring for a 25dH mocld du m. Tticy’a^ 
noticeably inore quiet. 

Through a glass, brightly 

'I wo otlier faaoi's to t'Oitsidcr wlien cluKifiing a projector are 
lamp tyfx^ and the least^s. 'Ilie most common types of lamjxs now 
used in projectors -dw HHP (Ultra High Performance) and UHE 
(Ultra High ElBdenty) lamj^s, altjjough Mime mcxiels still use 
metal halide, as well. Limp life will be rated for any pn^jector you 
buy^ and typical lifespans am Itetw'een l,tXX) and 4,0tX) hours. 
Replacement bulbs ain't dieap and will generally set you back 
$250 to $600, 

Buyer2one.com says that knowing the re]>lacenient cost of 
the lamp can hdp you delemiine your future spending on a given 
projector. If youTe comparing two projeciofs of the same 
brightness, ask about the wattage of their respective lamf>s. If 
there Is a dilTerence, g^) with tlie projetior that has a lower- 
powered bulb. Also look for projeciors that have an ‘"economy 
mode7 

BuycTZoncA’om say,s this setting reduces the power 
consumption of ilie projector, t titling brightness fw afx)ut 20 
percent in exchange for less noise, rcdticed electritJty irsage, and 
longer lamp life spiins. Some mtxlels have a lifes()an of 3,0(X) 
hours in economy mode, as opposed to 2,000 hours in standard 
mcxle. 

Z(x)m lensc\s are pretty iniidt the standard on iuodem 
projeciors; youll w^ant lo check how much a lens’ f-numiier (the 
smaller the numlxT, the moie light) changes at dtiferent zcjom 
stttings. If the change Ls minima! your image will mmain 
uniformly bright regardless of lens jxjsition, notes 
BuyerZotie.com. 

If W'dght isiTt an issue, tiy^ to llnd a machine with an alfglass 
lens (some are made with tightweiglil jjlastics). Gkiss is llie 
optimal filter for projec ting images and will give you a dearer 
pkTure, but adds a lor of heft lo a projerior. 

Also. L(>D pR)jeaors liave filters that Imve to Ix' cleaned 
regularly. DLP ptojtxiors liave no filters so yext don't have to 
w^orry alxtiit de;miiig tliem. 

Projecting your budget 

So w4iat am you ex|x?a to pay for a j^rojector? Following is 
a pretty g<K)d summary' from the Projector Central web site 
{hHp://wvvw,proj©clorcentral,com/lx>me_tHeater_buyers_guide_6. 
hfm): 

• S 1,000 or les,s: Even under 51,000, there are some solid home 
tlieaier projectors availal:)le. The least expen.sive ones are the 
854x480 models (also knowm as 480p). Tliey display DVl^ 
very well and some (but not all) are oipable of delivering 
very good HDTV' ak). However, there are some 1280x720 
(or 720p) models tliat have drf)pped Mow 51,000 as well. 
Tilts is the most versatile resolution to get into if you are jusi 
starling out and c’an afford it, as the 720p models are much 
lietter with in>TV, HD DVD and Hlu-ray than are the 480p 
mtxlels. 
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GPS DATA LOGGERS 



^ GPS Data Loggers now compatible with Mac OSX 
DG-IOO(USB) • BT-335 (Bluetooth) 

*■ Record and save up to 60,000 waypoints 

► Save data in .GPX and .KML formats 

► Display tracks on Google Earth® / Maps® 
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GlobalSync Utility for Mac 

www.usglobalsat.com 


• $1,000-$4,000: If yon have anyw^here frt)ni ShOCX) to $4,000 to 
Npend, you're in die j>rice bracket dominated by 720p 
l>n>jeaors. Many of Uk" most popular projettors t>n Pnijecior 
(Jentral fall into this pritt* bracket, including higlily flexible 
720p LCD prt)jecU)rK and siiigle-cliip 1>LP projectors with 
superb ctjotnist. 

■ $4,000 and up: 'Hiefe are, naturally, Itiis of liigle[K.tfamian€e 
720p pmjecnors aval I able at <ir iK^yend this price, including 
some tfiree-cliip DLP pmjectors. However, oncx^ you tro-ss the 
$4000 line, the next step up in re.st)liiriort, 1920x1080, Ix^cxjines 
attainable. The new 1080p pR>jectors, when coupled witli higli“ 
definition signal sources, olTer the ultimate in HD home theater, 
at least for now. 

Tlien. of aiuise, there aix." plenty of extras and options thai 
may prove useful to your particular situation: Onlxnard incaiiory 
card readers for image viewing, security femtures, wireless 
ixinntHliviiy, built-in dual'Channel stHind sf^eakers, etc. 

LCD projector waminties ninge from one to three years on 
parts and labor depending on the manufacturer. Wlien offered, 
.standard lxil[> coverage lends lo lie for 90 days. 
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CrashPlan PRO inaugurates a new era in cross-platfornn backup. 


We believe every business has the right to demand; 

Platform independence. Choice of platforms: Mac, 
Windows, Linux, Solaris 

Freedom to move. Your laptop is backed up when you 
need it, wherever you ore 

Right to restore. Empower your users to recover from their 
own mistakes 


Unencumbered performance. File protection without slowing 
you down 

Unrivaled protection. Onsite, offsite and online backup in 
one easy to use solution 

Now...go exercise your right to a 30-day free trial at 
www.crashplanpro.com 
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REAL WORLD REVIEW: 


NEC NP3161W 



If you wunr a liigh-end projecror — and can pan wiili 
arcHind $4,999 (slrm price), a gncK! cliuicc is ilie NEC 
N]\3151W, a XGA oieeting room projector that lx>a.sts 5000 .ANSI 
lumens (aniL believ'e us, that's really hrighr), a 5(K7:1 contrast 
nitio and a rcMjkaion of 12R0 x 800 (nalive) and KiOO x 1200 
fresized). It weighs l6,l pounds and has wireless and wide 
format features. Tlie projector has been designed to deliver 
home-theater level quality for professional environments. 

It features WXGA (1280 x 800) native rcsolutionj 
networking technologies and up to d(KX) hours of lamp life (in 
ECO Mode). Its vertical and iumzfjntal lens shift enables flexible 
projector plai ement. The remote desktop connection allows tlie 
projector to connect to a netw^orked computer remotely. 

A.s III) vicleo cfinteni is mtire ant! more frecjucntly 
displayed in ctjrporaLe and educatitm settings, tlie NP3151W lias 
tx.‘en designed to deliver home theaterdevel video quality’ for 
professional environments, it features advanced HQV video 
processing, detail enhancement contrast enhancement, 
adv'anced signal noise filtering and technologies designed to 
eliminate undesirable de-interlacing imperfeciions. 

Additionally; NEC offers a line of optionid bayonet lenses 
allows for quick and easy lens changes that allows a screen size 
from 40 inches to 500 inches, 'lire NP3151W’s lamp saver 
Technologies are designed to prcjteci the projector from 
overheating. Tlie lamp life cycle is rated at 2000 hours — or 
3000 hours in economy mode, For inputs the NP3151W 
supports Component (3 RCA), S-Video, Composite AA" (3 RCA), 
DVl. and Analog RGB (15-pin and 5 BNC). 

Tile projector has built-in stereo speakers, ITiere are also 
rliree stereo mini audio jacks, a 9-pin serial PC control port, a 
15-pin RGB output, and a USB pan for a keyboard or mouse. 
Network connectivity is accomplished by way of an Rj-45 
Etliernei port and a USB mounted 802.11 a/b/g Wi-Fi adipten 
Remote desktop conneciion allows the projector to connect to 
a networked computer renujtciy. 


The [projector (Operates at a 31dBA (ecotiomy mode) noise 
level. 

Real World Usage 

We pul this [irojecior througli its [>aces in some of the 
toughest environments. In short, it performs very well, has 
a great, hugely bright picture just as you would expect 
from n $5000 pn)jeci(>r. 

Even rntire amazing is that we used it in some outdoor 
environments. In one case, we put the projector, along 
with a portable screen from Da-hiie, in an open lent in the 
mid-day sun. The tent had three sides to it, with one side 
open, and even with the ,sun directly overhead, the picture 
was quite visible, if you've ever at templed sucli a thing, 
you'll realize how impressive this is. 

The projector did w'el! in a variety of other indoor and 
outdoor setups, with brightness and quality of picture 
being a constant stand out. The sotind that came from the 
unit was quite good, being loud and clear enough to have 
the projector out.side, and yet show a full length movie for 
a a gr>od size group to hear. 

The ability to move a signal over either Ethernet or 
WiFi w'as quite a plus for both computer based 
pre.senTations. or video playback. The only thing that we 
scratched our head about on this unit was that networking 
only worked with video, and not audio. So, for example, 
you could not show a video unles.s it had no sound, or the 
sound was handled through a separate sound system, 
liopefully, this is something that NEC will enable for ihe 
future. 

In short, this unit was very "Macdike" in that it “just 
worked", and gets a big thumbs up from us here at 
MacTech. 

—Dennis Sellers and Neil Ticktin 
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BEAL WORLD REVIEW. 


Da-Lite Deluxe Insta-Theater 


Many of us walch a mov'w on our Mac froni time to 
time. Generally, that works out pretty well, But sometimes 

does matter, and even if you have a ^O-inch Cinema 
Display, a hi^^ger screen for viewing movies is always a 
great thing. 

One good solution, if it firs your budget, is tricking out 
your Mac with a prf>jecior and a stow-aw'uy screen (as well 
as, optimally, a good sound system). We looked around the 
market, and found a solid screen choice is the Da-Lite 
Deluxe Insta-Tlicater. And. then put li lo some real world 
use. First impression? Wow. Simply wow. Not sure how 
else to put it. 

It's available in 60. 80 
and 100 inch diagonal sizes 
ill NTSC Video format and 
73 and 90 imh diagonal 
sizes in HDTV formal. List 
prices range from $490 for 
I h e 60- i nc h e r (V i d eo fo rma t) 
to $740 For 904nch model 
with Da-Lite’s Wide 
[\iwer screen surface. 

However, you can find them 
for niudi less if you shop 
around, 

Whads Wide Power? 

According to the folks at 
Da-Lite, it’s a screen surface 
that combines the features 
of a higher gain screen 
surlace of 22 w'ith a wider 
45 degree viewing angle. 

Tlie smooili acrylic surface 
can lie cleaned with mild 
soap and water. 

The big advantage the 
Da-Lite screen has over 
many of its competitors is 
the case of setting it up, 
then storing it when it's not 
being used. The Deluxe 
Insia-Theater s[)ons a 
pneumatic scissors 

mechanism in an aluminum 
case for raising and 
lowering the screen surface. 

To set it up, release and raise the extension arm. Unroll the 
screen to the height you need, 'then, well, ihaPs it. 

The Deluxe fnsla-Theater is sturdy as it sits directly on 
the floor using two thin feet that swung out to 11.5 inches 
in length. The pneumatic scissors mechanism helps 
stabilize and balance the screen wdien ids fully extended, 


as well as lie I ping ensure the .screen surface doesn't w'arp. 
That said, if you use it outside, a breeze will catch it easily 
and you may w^ant to tie it dowm. Furthermore, if someone 
walks briskly behind it, you would see their air dLsruphon 
as you w^ould on any screen. 

We used it not only in inside settings, but outside 
sen logs (b<jih day and night) and found ilu‘ screen to be 
bright, ridiculously easy to set up, and a pleasure to use. 

When you're done with the screen, press the center of 
the hantllc atop the .screen and tlie device smoothly slides 
back into its case. Said case is only 4.5 inches around with 
the stabilizer feel retracted. 

Da-Lite also makes a 
series of l)laek nylon cases 
for the screens to help 
protect them dining 
transport. The cases range 
in price from $52 to $90, 
depending on the model 
The Da-[ale Deluxe 
I n.sta-Theater is lightw'eight 
(the heaviest model is 
around 20 pounds), so it's 
also good for traveling or 
business presentations (but 
w'atching movies on It is a 
lot more fun). Tlicre’s also 
a Tlieaier-Lite version that 
has no pneumatic scissor 
mechanism; ii ,seis up by 
releasing and raising the 
extension arm, then 
unrolling the screen to the 
preferred height. 

The Deluxe Insta- 
Theater is geared more 
towards traveling 

professionals, wdiile the 
Theater Lite is de.signed 
w'itli family use and/or 
gaming rooms in mind. The 
Liie version comes in 60 
and 80 inches with list 
piices of $350 and $398, 
respectively. However, note 
llial Da-Lile's Wide Powder 
is (jnly available on the Delu.xe Insta-Theater screen line. 

Available from www.dalite.com 

—Dennis Seilers and Neil Ticktin 
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MCX: No Excuses, Now! 


New options for managing workstations 
in OS X Leopard 


By Greg Neagle, MacEnterprise.org 



MacEnterprise.org 

Mac OS X enterprise deployment project 


Frequenlly Asked Questions 

TIktu is y ctilain type uf question that popa up ovlt atitl over 
again on tltc Micilnterprise mailing \isi. the radmind-users list, and 
other lists, fonmis. anti clLstiission gnnips \\\wrv adtnins hang 
out You'll als(j hetir ihtst^ (jucsiions at tlie Mat^vtjrltl IT traek, and 
at WWIX. Ihe questions go like this: '‘lk)\v dt) I in;mage the 
.stTeen saver so it always asks for a password? ’ Tlow ("an I pa-VL^ni 
llie OS from asking the u,ser if they want to tise a newly LXjnncetal 
FireWiteAiSli disk ;is it 'lime Machine hacku[i destination? ' "I k w 
do \ get the Otlke 2(X}8 Stiiip Assistant to not pop up ibr ntw 
users?'' Or nioa' generally, “! low do 1 manage the user exixaience 
on all my machines?” Nine limes ixit of ten, this (juesiion can Ik" 
answered with ^^llse MCX!" 

MCX 

For sevenil years, Apple has hail a technology for managing 
workstaiKjas and the user exjKTienee, often refenvd to as MCX, or 
Man;iged Client for OS X, lb take advantage of MCX to manage 
users, gnMips, ami a>mpuiers, an ;Klniinistnuor uses Ap(>le's 
Workgnxip Manager LiLilily edit recoals in a diaxloiv senate -- 
typically 0(xai Diaciury. hut scjmeiintes Active Directory in thirtk 
p;rrry !J)AI\3 \^1th Apple’s schema exitmions. 

If your oigaiii/ation did not u,se Ojxai Diaxaory as its ceitlral 
diactory service, and was unwilling or unable to extend the 
schema on its existing diaxtory service, it was difficiili k) get tin* 
Ixmefils cjf using MCX to manage your Macs and their usc^rs. 

Tliere ww a few optioas: one, often refemed to as the “Magic 
Triangle"*, tnvolvtxl himling client Macs to both the oig^mi/ation's 
central diaxtory services, and to a kx-'ally-nianaged Ojtcn DiaxKjry 
server. Mac clients would tlien receive their user and group info 
from the central directory, and their client manageiTx^nt tbita fn>m 
Open Directory. 

Anotlier option was for adniiiis to w rite scripts dial mplicaicai 
some of the behavior provided by MCX - usually by nitxliJying plist 
files wath the defaults (ximmand or FlisiBuddy. 

Far less fat|uetitly usc‘d was tlu; option to stoa MCX data in 
the client's Icx:al directory service. Tliis was passible witli Netinfo, 
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but the inmlile was appealing th(jst^ sellings across multiple 
macliines. You could not simply abdicate the Netinfo daDlrase 
acuKs multiple machint.^; yiai had to fitul a v\ay to ex|x>rl the MCX 
data lam! the oltietis it wiis attached Ui\ and import ilus data on 
Ollier niacilines. 

So wlien a Mac adniinistrator askal "’How do I m;inage,..", 
and yim replieil ""Use MCX!”, rheyd often object; '8111 I don’t liavc 
an Optm Dircxlory^ sener, and my Atliw Dirc'clory admins ^^rm\ 
lei us extend the ,sehema! So is there another way,,.?” Using MCX 
data in die kml Nednfo was ux> difficuli. so thty spent a lot of time 
writing .scripts to manage things, and then fnishal those* scri^Xs out 
to every mucliine. 

lxs)pard cliangc's the equation. Novx* ihen^ is really no excuse 
at all to not ttse MCX to manage ytxir nuidiinc% If vent don't liave 
a cviitral MCJ^-friaidly directory’ service, >r?u can stewe tlie MCX 
data in the local diaxiory^ service. Mou- ini|iortanriy, since this iTita 
is storexi as .simple files, fcpliciting this to other machines Is as 
simple as copying a few file's. If you manage multiple OS X 
machines, you must have a way to copy files to each miuiiine - 
that might lx* a softw'art* disiribulion mechanism like Qtsper or 
FileWave, a fiktiy.siem luinagement utility like radmind, or even 
something as htsic as Apple Remote Desktop nr the sep uriiity. 

Ihis methfxl also alkws administniiors to case into MCX 
management: yt>u do not nevd an 0|xai Direciory^ server or 
extended schema to get startetl. Instead, you can start with the ItxTil 
directory^ service. Once the powers-ihat lx* in your oiganization c’an 
set* the Ix'nefils of MCX, they may lx* mom inclined to invest in die 
tesouues needed to set up a ^M;lgie i'riangle" or extend the 
scheiTUi on your existing diretiory service. 

Demo Time 

Ijet's demoastmie w'hai ciin lx* done widi MCX and die KkuI 
diiectory service. 
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You'll need Workgroup Manager wUkh is ptin of' Apple's 
Server Admin T(x>ls 10.5* Gel iheni fnim your le^t^parcJ Server insiall 
iT^iia, or search Apple’s website for “Server Admin Tools” 

'I’o work with the local director}^ .service, launch Workgroup 
Manager on a OS X <'lieni mat hine. Wlien p^t^st^nlal with the 
dialog to connect to a serv'er. ty^pe ioc’aIliast“ as tiie serv'er name, 
and enter the name and pas.sw<ird of a local admin for the Itx'iil 
rmcltine, 

Worki;}<^Qim Manjbgtr Ctmn^i; 

Addr«Si 

P*^swoai i _ 

Et«mtmbitr smfwoi'd in my 



Workgniup Managei; You'll now have a guest object in the 

Computer view: 
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Ifomt 


ciwTA ^ CwwM^ Y 


Yuu1i see a warning liiai you are working in a direcitjry ncxle 
that is not visible to the network. Cheek Do not show this warning 
again iJ you w^isli, anti eliek OK to disinks the panel. 

For [xir^ioises of Lliis demo, well manage aspeels of tlie Itxi'al 
machine rising tlie guest a)nif)Uler tjbjeet. Sellings for this tjbjeci 
apply to all computers that ckan’t have an explicit eonipiiter account 
record in the directoiy, whieli makes it wurk well for this demo. 
Cluxise Create Guest Computer lW>m ilie Server menu in 


Seiea rhe guest lomputet; then click the Preferences icY>n in 
the Ux)lbar We‘re going Uj sel some options lor die Ijogin Window, 
click the Login ia>n in the Preferences overview. 


THE ULTIMATE COMPUTER THEFT PROTECTION SERVICE 


LoJack for Laptops is a software-based theft recovery 
service that tracks, locates and recovers stolen 
laptop and desktop computers. 
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Merlin 2 


Project 
Management 
with 
a bit of 
Magici 



Just three out of hundreds of features: 

Network-based Project Management 
^ Collaborate with others on the same 
project over the network. Just with a 
single mouse click. 

Automatic sync to iCal 

Sync your projects to iCal and then 
^ onto your iPhone or any other 
mobile device. 


Under the Window uh. (iic'k Manage: Always, then miike 
some clianges to llie in;inaged settings. Tve duinged ilie 

Heading xo display the serial niunlTer iastead of the machine name, 
addfcxJ a me^ge to the Winikav; anil t liang^ the Style to 
sliovv only name and passwtjnJ fields (instead ol^ Lite defauft list tjf 
asei^). 




Professional Cost Calculation 


M<VW 

Dint awiuup» 



ProjectWizards 

Merlin 2 is built from 
project managers for 
project managers. 


Get your free demo version 
www.merlin2.net 


i i 


Define Budgets top-down or bottom 
up and compare them to planned vs. 
actual costs. 



Cliek Apply Now to save your diangen. 

Now log out and you should .see the kigin Window^ display 
tile dianges. If you don’t, a mstiirt should get them to kick in. 


Mac OS X 

Tha M i otne ^ lOCiT UOl 


o ^ 
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Aqua Connect Terminal Server is the only scalable enterprise 
grade solution that allows the Mac OS X platform to be 
deployed to multiple diverse devices, including Macs, PCs, 
and thin clients. Aqua Connect offers a feature set that truly 
simplifies OS X administration. 






www.aquaconnect.net 
(866) 543-AQUA (2782) 


CopynghI 02006 Aqua Cofiflact LLC. AD righta reMnred. Aqua ConnacITeimina) Swvei e a liademarti of Aqua Connect U.C In 6ie US and/or ottwr countries Other names may be nademants of their 

respective owners 




































Even more interesting: log back in and open System 
Preferences, select the Accounts preference pane, and 
choose Login Options, if you Followed my example and set 
the Login Window to show name and password text fields, 
yon 11 see that option set in the preference pane, and grayed 
out so you cannot change it. 






Accountt 





w 


Cng K«agl4 


* o^t murnm 
jL Cbtit Afcaunt 



*i -"i 


Avtorvfftic loqwii * PtijriMW ijij 

QjipFUY window U. Utt <vl Htm 

V: Ittm 4 iu{ paii^wiffl 

M StiDw ^ Skep, And Shut Down 

‘ Show InjWJl m*nu M fegln window 
' ’ Sh«w p«ftYiprd Wntt 
QUm t^aKiCrtr a 1 lo®m wipttfow 

M Ahow nttworlk UHD te Ipgln Ko thi? cSfriBUt^r { Ortiom; , ^ 
M Cfubltf fut uisf twitching 




GUM. tiw lock 10 Iitn>«ni Funiw cfutigii. 



We’ve used Workgroup Manager lo manage certain 
preferences for this machine, and stored the MCX record in 
the local directory ser\ice. But what exactly does that mean? 
To find out, login as an admin and open the Terminal 
application. You’ll need root privileges, so type sudo -s 
and press return> entering your own password when 
prompted (your account will typically need to l>e admin level 
to work. If not, login with an admindevel account). 

Now change to the local directory service directory, and 
list its contents: 

root# cd /ptlvaLe/var/db/dslocal/nodes/Dfifaiilt 
rooti Is 

aliases coinpULprgtoiJps config machines 

users 

coiiiputer_lists cotnputerij groups networks 

The guest computer object we created, since it’s a 
computer object, is stored in the ’’computers” directory: 

toot# cd cottputers 
root# Is 
guest.plist 


This is a huge advantage of using MCX instead of scripts 
that write to various plists - in many cases, the OS updates 
the user interface lo relied your management settings. 



let’s examine guest-plLst: 

root# oat guest,plist 

And you’ll see a standard OS X pUsi, which is too long 
and btiring to li.st here. But you don't really need to deal with 
the internal structure at all to replicate these MCX settings 
on another machine, yiui need only copy this file to tlie same 
location on another machine (and most likely reslari the 
Ollier machine, or restart Directory Service lo gel it to notice 
your changes), If you have a w*ay to push out files to your 
managed machines, you can now push out MCX settings the 
same w'ay. 

Future Directions 

1'he demonslralirm isn't very ITexible: since all the 
managed settings are stored in guesLplist, it’s hard to mix 
and matclt settings. Next time^ well look at some MCX 
management strategies using Leopard's new 
ComputerGroups that allow' you to mix and match 
tmmugemem policies. 

\\\\ 
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Achieve post-production image quality 
during pre-shoot setups. With NEC's full 
line of professional-grade desktop LCD 
displays, the guessing games are over. 
Accurate, consistent and repeatable color 
performance, along with calibration and 
sharpness toots, give you confidence in 
knowing that your on-screen images will 
look just as bold, bright and beautiful as 
they will on next month's magazine cover. 

Choose from 19" - 30" sizes with 
widescreen and cabinet color options. 

True brilliance. True NEC. 
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26^ NEC MuktSync LCD2690WUXi SpBCtraVmw^'^^ Cotor 
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Advanced CVS 

Get more out of your CVS Setup 


by Jose R.C. Cruz 



Introduction 

In the article ‘'Version Control on a Budget'', we learned 
how to use the CVS tool to manage out project tiles. Tcxlay, we 
will explore some of the tooBs advanced features. 

First, we will configure the tool on eiiiicr the client or 
server side. I'hen we will use die tool to keep track of project 
activity. Finally, we use the rk.)] [o manage the projeci 
refxjsitory. 

Be aware that diis article as^sunies diat you have a basic 
undei'stancling of CVvS and bash, 

Configuring CVS 

You can configure your CVS setup in iw'o w'ays. One way 
is to add an invisible file in your home directory. This file, called 
a ntthamfrol /tie, tells the tool how^ to handle each SCM 
traasaiiion. Users can have dieir awn tmicjue run-cxmtfol files, 
or diey can share a common set t)f files. 

Another way is to change one of l!ie files in the CVS ROOT 
directofY- 'lb acce.ss tho.se files, type the lollf>wing staten^ent at 
llie Terminal prompt, 

CVS cbeikout CVSROOT 

CVS then copies the CVSROOT tiles and stores them on the 
current wxak directory. After you made your changes, commit 
them back to the reix>siiory as foilow's. 

CVS commit m changes to the CVSROOT files'* 

CVSROOT 

First, CVS updates its CVSROOT directory with all your 
changes. It then applies your change.s to all future comnumds. 
If you, however, t:hanged a single file, e.g. modules, you can 
coniinit just that file as follows. 

CVS commit I3i “MadK chiingos to the CVSROOT fllo 
■modules'” modules 

Backing up CVSROOT 

Before clianging any of the CVSROOT Hies, make sure to 
create a backup of iltosc files. This wall protect your CVS setup 


Iroin any errt>rs caused by your changes. One way to hackui) 
CVSROOT is to use die tar ttx)l. 

Assume, for e.xample, that your CVSROOT directory is 
stored in /Volumes/Rrojects/Database. A^mime alsoiliat 
you want to store the tarball in /Volumes/Backup. To create 
the CVSROOT tari^all, tyjX* the folknving at die Terminal prompt. 

Lar create verbose gyJp -file 
/Volumea/Backtips/CVSROUT.tar.ga \ 

/ Volumtia/Databaiie/CVSROOT/ * 

First, the tar tool copies all the files in the CVSROOT 
directory It then stores the copies in the tarball 
CVSROOT * tar *gz. It also compresses the tarball with the 
gzip ux)l. 

Now if you made a mistake configuring your CVS .setup, 

type ihc following statement al the Terminal prompt. 

tar -extract -%zip -file 
/V<3 Iuhibr/B ackups/GVSKOOT»tar, gz \ 

^directory / 

The tar toul then updates your CVSROOT directory with the 
contents of the tarball CVSROOT, ta r, gz. 

The .CVSignore file 

Use the . CVS ignore file to tell CVS which project file 
to exclude from its repository. CVS checks this file each 
time ii gets an import or an update subcommand. Use 
your favorite text editor to create this file on your home 
directory. Make sure tt> precede the file's name with a 
period, ' , *. 

Each line in the .c vs ignore file is either njtiename 
or a g!oh paitern. Glob paiterns work in the same way as 
regex patterns, l>ut they have a simpler syntax. 

Listing 1 is a sample of entries in a .evsignore file. 
I'he first entry matches the invisible file .DS^Store. The 
second matches any file with a .dbug extension. And the 
third matches any HTML files that have the name foobar 
or foobur. 
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Plays well with others. 

Run Windows and Mac OS X at the 
same time - without rebooting. 




With Parallels® Desktop 3.0 for Mac, you can: 

• Automatically open Windows files with Mac software and Mac fries with Windows software 

• Bulletproof your virtual machine from Windows system crashes and malware 

• Run selected Windows-only 3D games and applications with 3D graphics support 

• Browse through Windows files and folders without launching Windows 

■ Move your existing Windows PC to a Mac without losing data or reinstalling any software 

• Completely share files and folders between Windows and Mac 


II Parallels' 


Parallels® Desktop 3.0 for Mac provides even more ground 
breaking features and capabilities than previous versions. 
Already The #1 Selling Mac System Utility according to NPD 
Techworld (09/06 ^ 12/07) and recently named an Info World 
Magazine ‘"2008 Technology of the Year”, Parallels® Desktop 
is trusted by over 800,000 users world wide. 

Want better Windows and Mac integration? Want to run the 


hottest PC games and graphics software? Wbrried about 
security and system mishaps? Parallels® Desktop 3.0 for 
Mac includes 50+ new features and enhancements, includ¬ 
ing a number of integration features and virtual machine 
utilities unavailable anywhere else. 

To discover why Parallels® Desktop is the leading desktop 
virtualization solution for running Windows on a Mac, visit us 
online or call us at 1 (425) 282-6405, 



©wnfoM'a^frWfoSay M 




Website - www.parallels.com Email * sal6s@paraliels.com 


Phone-1 (425)282-6405 


















Listing 1, Example of a *cv$igiiore file. 

.I>S_Store 
• .dbug 

foQb[an]r.him 

Before you install your ,c vs ignore file, he aw;ire timi 
CVS already excludes certain file iype.s by default. A sample 

of iliese file types are as follows. 

*.a ’,bak v. BAR o •.obj '.old 

*.ori& 

For a complete list tjf excluded file types* consult the online 
CVS manual i$ee reference), 

Flnallyp you can tell CVS to disable your .cvsignore 
file for certain tasks. To do so, add the I option to your 
import or update subcommand (note the * I ' character). 
This option disables not only your .cvsignore file but 
also the default list of file types dial CVS ignores. 

The . cvsrc file 

Use the . cvsrc file to set the default options for either 
the CVS tool or any of its subconiniatHis. Like the 
• cvaignore file, the , cvsrc file also goes into your 
home directory. Use your favorite text cdiltir to create this 
file. 

Each line in the .cvsrc file has the following syntax, 
CVS I ^ubcfnotsand option foption! 

If the leftmost item is a subtomnwiuf. the option argument 
is t>ne of the option flags used only by that subcommand, 
But if the leftmost item is CVS itself, the opt/on argument 


is one of the global options available to dial lool Those 
t>piions apply to all CVS transactions. Read the online CVS 
manual (see reference) for a list of available options. 

Li.sting 2 is a sample of entries in a .cvsrc file. In the 
first line, the -r option tells CVS to set the Stales of the 
project files as read-only. The - q option tells it to keep its 
feedback messages to the bare minimum. 

In the second line, the *f option tells CVS to allow^ 
committals even if none of the project files have changed. In 
the third line, the -f option tells CVS to always export the 
head revision. The option tells the Uml to remove any 
em[>iy d tree tor ie.s frtjm the exported project. 

Listing 2. Example of a .cvsrc file. 

CVS = r q 

corotnit -f 

export f -P 

Any changes you made to the .cvsrc file are used by 
the next CVS command. You can, however, tell CVS to 
ignore the .cvsrc file for certain tasks. To do s(j, use the 
-f global option. 

Assume, for example, you are using the .cvsrc file 
shown in Listing 2. To commit only iho.se files that you have 

changed in project foobar, type the folkiwing ,siaiemeni. 

CVS -f commit foobor 

Do not add the -f global option to ihe .cvsrc file. 
This is an unsupported selling and can result in aberrant 
behavior. 



DVI KVM with USB 2.0, FireWire, Audio, and 30" Display Support 


D Supports DVI and VGA displays, including 30"displays (2560x1600 resolution) 
1 Integrated USB hub allows USB device sharing between 2 computers 
0 FireWire & Audio support allow FireWire and audio device sharing 
Simple push button or hotkey switching DSupports PC and Mac 
0 Includes two sets of DVI, USB, FireWire, and audio cables 


^ 3 ^ CiHnpaiiiilc 


digital Ilfs addlogtx style 


4S9 Wii^lrvitw.CA 341^0668 * 

Aitracle Aimes 4t9r«9liiefed ii4dm4rk$0lres(iiKtn«c^^ Wic H videtiwX of Apple. 

Actyil prodiKt be ciffeieot from i£spti^ed. 















The cvswrappers file 

Lfse the cvswrappers file to tel] CTS wliidi pn)jed filers 
are text files and which are hmary^ files. Use it alsi) to tell CVS 
lu)w to stt>re each file ryix^ in the repositorv'. Itiere are two 
versU)ns of tliis file: one in tlie CVSROOT dirvcktry^, the trtlicr in 
the home cihectoty. 'Ilie name for the home directory* version is 
.cvswrappers. 

Each line in the cvswrappers file has the following? 
syntax. 

flic najEe I glob parrt»rn opffon mo^e [optJu/i ^]!lt^^^el 

The line starts with a filename t)r a ghb pattern. 'Hte option 
argument sets the .sVom^^e optkm for dial file, die mode arj'UiueriL 
the storage m<Hle. Eiich line can have at most two sets of diese 
ai^uinenis. 

For a hi nary file, e.g. TIFU add die following entry' ttj tlie 
cvswrappers file* 

Mtif.tiffI k 'b' m COPY 

‘llie above entry rnalches any file dial has a .tlf or ,tiff 
extension. It tells CVS not to convert any end-of-iine cliaraaers 
in the file* It afso tells CVS to always store a copy of that file 
intad in the rejKisitury. 

For a tmthmer/^ecihle fexf Jile, e,g. a UTFdfi file, use the 
same option and mtxli's as the binary' file* llus is to compensate 
tor CVSs lack of siipptM for Unicode-based files. 

For a merf^mhle text ftk\ e.g, C-headers and sources, add 

ifie following enirv to the cvswrappers file, 

Mc,bf 'p'WEROE 

The alxwe entiy matches any file diat has a . c or , h extension. 
If the reixjsitory' has a copy of that file, CVS stores only tlx^ 
differences l>etween the two. Otherwise, CVS will store an intad 
cxipy of the text file. 

Now if you havf two versions of the cvswrappers file 
present, CVS will use the entries frtini Ixiih files as one. If Ixrth 
versions of the file have entries for the same rilenanie or gkib 
patlem, CVS w'ill use the entry from the 
CVSROOT/cvswrappers. 

Finally, you am override the entries m Ixith cvswrappers 
files by atkiing a -k option to your CVS statement. Head the 
online CV'S manual (see lyfinvnce) to leam whi<h sulxoinmand 
uses die -k option. 
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The modules file 

Use die modules file to set slioncuts to specific projects 
or items in the repo,sitory. Siiortcuts reduce tlie amount of 
typing needed. They are also easier to reniemlx^r if chosen 
correctly. 

Kach line in the modules file has the following syntax, 
shortcut [options] r(»poiiJrory_pafh 

The options argumem defines liow die shortcut will work. It 
has one of two possible values: -a for an alias and *d for a 
directory, Tlie reposi tQry_pa Lh argument ts die path lo die 
item or [irojed in the rejxisitory, 

lasting 3 is a sample ufslKjrlculs in a modules file. The 
firsi shortcut tells CVS lo retrieve the items in project foobar. 
Also, CVS s;lv^^s those items under the directory MyFoo. 
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The second shortcut tells CVS to retrieve only the items in 
the gntphioi direclory of project foobar. The -a oplkjn then 
tells the tcx)) to save tliose items under the same direaory of 
foobar/graphics. 

1he third shortan tells CVS to reuieve tlie items in pn>jeci 
foobar. But tlie ' I' token tells it to exclude those items in the 
directory foobar/graphics. Again, the -a option tells the 
tool to siive the retrieved items in the directory foobar. 

Tlie fourtli shortcut tells CVS to retrieve die project items 
rcTera'd to by the shortait NoPics. Note the ampersand 
symbol, \ in front of the referring shf>rtcul. 

Tlie fiflli shortcut tells CVS to retrieve the items in project 
foobar. Also, the -d option tells the tool to store those items 
under the directory Test/foobar, 

Finally^ the sixlli sliortcui iclls CVS to retrieve only the file 
foobar •css. And the -a option tells the Ick)! to save the file 
in the directory foobar/styles. 

Listing 3- Example of a inodules file. 

MyFdfj fddbar 

MyPicfi: foobar/u,raphlcs 

NoPics -a Ifoobar/graphics foobar/ 

PicFree iNoPics 

HySUi" d Trsi foobar 

MyStyles 'a foobar/styles/foobar.css 

Tracking Project Activity 

Tracking project activity is an import anl part of the work 
cycle, Ii helps identify wliich files got the mmi aiieniion and 


those that got the least. It helps measure the nitmlx:r of changes 
made to each file. Tracking also shows which users worked on 
which files, and the time spent on each file. It can also help 
users ccK)rdinaie ilteir efforts and avoid pcxssible conflicts. 

Tracking file activity 

Use the cvs log command to list tlie changes made to the 
project or file. For example, to list all the changes to the file 

foobar •htm, type the command as follows. 

CVS log foobar,htm 

CVS then displays the list on the Temiinal window. To save the 
list of changes into a file, e.g. foobar. log, use the '>' 
operator. 

CVS log foobar.htm ) foobar,log 

You am restrict the list to a specific date or revision range. 
To resirifl it by date, u.se Lite d option. Fur example, to show 

only changes made l^etween 2007 
Aug 1 and 2007 Sep U type Lite 

command as follows. 

CVS log -d"2OO7/O&/OKa007/O9/Or foobar 

Notice tliat there Is no space [between the d option and die 
cbte range. Also, notice ihe use of the * K ' token to specify an 
exclusive range. For an inclusive date range, tety^pe the 

command with a * <=' token, 

CVS log d‘’2007/0a/01<-20f>7/09/0r foobar 

To restrict the range by revision number, use the -r option. 
For cxaiii[3le, to show only the changes made lietween revlsioas 
1.2 and 1,5, type the command as follows. 
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CYS T-0£ ■rl.2:KS foobai: 

Nt Stiff 211^1 in that lliLTf is nn space between the option :ind tite 
ran^e. Notice also tile use oF the *: ' token to st:»ecil^^ an 
inclusive range. 

To le^irn other useful log options, read the online CVS 
manual [see reference). 

Figure 1 is a sample output from the evs log command. 
Tlie header section tells us where ihe project file is located on 
ilie rupt>,sitory. It tells us what tags l^clong to the file igokf), and 
the revision count iivd). it also shows a shtjrt description of the 
file {j^reen), if one is available. 

Right after the header is a list of changes made to the file, 
liach entry stans with the revision numlier and date of the 
change It shows the user who made the change {blue), 

the flic’s current state irecl), and the number of lines that 
changed {pink), 
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Figure 1. Sample output of the evs log command. 
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The ouipLit of the evs log tornmand, however, is not 
custonu 2 :able. Creating it is a separate sx^^p. making it prone to 
neglect. It C 2 in also Ix" changed either by accident or by intent. 
But yon can have CVS cTcate the log ouijiut aulomulically. 
You can custoniii^e tlie output to suite your tieeds. You can also 
make the output a |>art of your project file, thus serving as a 
version histor)^ tor thai file. You ciin do all lliese by using 
rerisio n ke ] words. 

Table 1 is a list of common revision keywords, lb use these 
keywords, add them within a comments block. Doing so will tel! 
the files owner to ignore the keywords. Also, when you eoininit 
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the file to the rcpf)siiory, CVS iipchites each keyword with tlie 
riglit iiifoniiation. 


Table 1, A list of useful revision keywords. 

Keyword Description 

$Author$ Name of llie last user who made ihe change 

$Date$ Date when the change was made 

$ Hea d e r $ Basic header inforniaiion 

$Log$ A description of changes made to the file 

$StatG$ Stale of tlie file wTien the change was made 

$Source$ LtK:ation of the projeci Ole in the repository 

$Revision$ Revision nLimber assigned to die file 


Listing 5 is a sample revision block for an HTML file, Notice 
the bkxk is placed between the comment marks <1- —>. 
Assume you added this block lo the file £oobar»htm. Then 

you coniniitted llie file liy typing the following coniniand. 

CVS commit m '^Added the cevision history block" 
foobar.htM 


Lisrting 5. A sample revision block. 

< 1 - 

SSource$ 

SAuthor$ 

$Daie$ 

Revision history: 

$Log$ 

-> 

CVS responds l>y first updating the revision [)lcx:k as shown by 
Listing 6, It then commits the updated Hie to the repository. 
Notice that the block retains the key\vijrd.s, even after tlie 
Lipdale. Also, future committals will cause CVS Lo iaserl more 
entries right after the $Log$ keyword. 

Listing 6- The revision block after a 

committal. 

<! 

SSource: /Volumes/Frojects/CVS/foobar/foobar*hm.v $ 

SAuthor; Oardin $ 

$Date: 2007/09/11 04:30:50 $ 

Revision history: 

SLo&: foobar.htm.v $ 

Revision 1.2 2007/09/I t 04:30:50 s_hard|n 

Added the revision history block. 

> 


Tracking user activities 

D-se the evs watch command to keep track of users 
working on the same project. This command performs two 
functions. First, it sets the project file to a reac/-only sl^^e during 
a checkout or an update. Second, it add.s a user to the w'atoh list. 

The basic syntax of the evs watch command is as 
follows. 

CVS watch vp&tutor [fils «,] 

The operator argument sets the behavior of the command. It 
has four fxjs.sihle values: on, off, add, and remove. You can 
also list more than one file after the command. 
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Ijet us assLiine that you are working on project foobar 
with another user named h_mallow. To add the Fiie to the 

wak'li list, uso the cvs watch command with an on o]KTaian 
CVS watch on foobar»htm 

When h_mallow checks out a copy of the file* he will find the 
file in a tead-only siaie. To remove the file from the w^atdi list, 
use the comiiiand with an off operator. 

CVS watch off foobar,htm 

Sime you placed ihe file on the vvatcli liM, you should 
infonn h_mallow that you are w^atching that file, lb do so* use 

the CVS watch command with an add openiton 
CVS watch add foobar *htin 

To remove yourself from tlie list, use the command with a 

remove operator. 

CVS watch remove foobar,htm 

To get a list of otlier users watcliing the file* use the cvs 
watchers command. 

CVS watchers foobar.htm 

Listing 7 shows a sample oul[)ut tjf tlie af)ove conunand. 

Listing 7. Sample output of the cvs 
watchers command. 

foobar. CSS. h_maiiow edit uiiediL comtait 

foobar^htm yoijiInhere edit unedit conmit 

Now- a.ssiime ihai user h_mallow added the file 
foobar* css to the watch list. When you checked out that file, 
you will find it set to a read-only state. If you w^ani to change 


the tile* first use the cvs edit command to change its stale to 

ivacf/wrile. 

t:vs edit foobar. c^s 

When user h_niallow types ilie cvs watchers command, he 

gets the following list of users. 

foobar^esu h^tnftllow odll uu&dlr coKtmlt 

youRhere tedit tunedit tcommit 
foubar.htra yuuRhere cdU micdlt cuimnlt 

He then sees tliar you (bold) have started w^ork on die 
foobar,css file. 

Once you liave made your changes to foobar, css, u.se 
the CVS unedit command to set the file's state hack to read¬ 
only. 

CVS unedit foc5bar,css 

Conimitling your changes to the repcisitory will also do file same 
thing. And both actions will remc^ve you from tlie waich list. 

Managing The Repository 

Sometimes* you w^ant to make minor changes to your 
firoject repository. You may w^ant to set tags to specific project 
revisions. Or you may w^ant to generate a patch tor a specifk' 
project file. 

CV'S gives you the means to make these changes directly on 
the repository. But be aware that you could easily mess up the 
repository as well. Make sure to create a backup of your 
repository' iK'forehand. Also* make sure' to allow only a small 
group of tmsted users to change the reixjsitory itself, 
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Managing tags 


Now, you use the cvs tag command to assign a tag to a 
file or project frtjm your working copy. To do llie same directly 
on tlie repositojy, use tiie cvs rtag comniand. Unlike die 
former, you do not need a working copy of tlie project to use 
this command. 

The liiasic syntax of the cvs rtag command is as follows, 
rtag [optioi^sf] file | directory | project 

This c:ommancl shares many of the S4ime options as the cvs 
tag command. For example, that you are managing the project 
foobar. lb set the tag alphal to the latest reutsion of tlie file 

foobar ditm, type* ihe cximmand as follows. 

CY£ rta^ alpha1 foobar.htn 

To set the same tag to the latest revision of pn^ject foobar, type 
it as ftillow's. 

rvrs rtag alphal foobar 

vSupt)ose a user gave the wrong tag betal to the latest 
revision of foobar .htm. To rt^move that tag, u.se the option. 

rve rtag -d b&tal foobar,hta 

But make sure that tlie lag exists helbre you remove it, 
Otherwise, CVS will return an error message, Lise the cvs 

status command with a v option to get a list of tags, 

CVS status -v foobar.htin 

CVS then displays a li.st of all tags assigned to the file 
foobar, htm (Figure 2, 
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Figure 2. Sample output of the cvs status -v command. 

Assume you w^ant to ,set the tag devl to revision 1.15 of 
foobar .htm. To do so. use ihe cvs rtag command with a -r 
t)pt]on. 

tvs rtag r 1.15 devl foobar,htm 

If you w^ant to set the stime mg to the file foobar. css nevlsetl cm 
2007 Sept 01, use llie D option. 

CVS rtag D Iiy07/09/0l de'vl foobar,css 

Again, make sune that either revision niimlxT or ckte exists on the 
repository. If ycju are not sure, add a £ option to lire conanand. 
CVS rtag -f r 1.15 devl foobar,htm 

If CVS fails To find the .specifitxl revision or date, it will set the tag 
to the latttst revisit m of tliat file. 

Sufiposc a user ,sets ilic tag GMl to the wrong revision of 
foobar * htm. 1b move that tag to the conect revision, e,g. 2.0, use 
tlie -F option, 

CVS rtag F -r 2,0 GML foobar.htm 
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First, CVS removes the tag GHl from f oobar .htm. Tiien it txssigns 
the same tag to revision 2.0 £)f that file. 

A-ssume tliat projea fex^har hiis a sSubdifuetor)^ named 
scripts, io set the tag alphaS to all tlie files in that sulxlirectory, 

lypt' ilie CVS rtag command as follows. 

CVS rtag alpha3 foobar/scriprs 

Not only will CTS tag all the files in scripts, it will also locate 
any scripts sulxltimories and tag their files as well, lb rag only 

ll^ose files in tlie scripts sLihdirectory, use llie 1 oplit)n. 
eva rtag 1 alpha3 foobar/ectipts 

Managing diffs 

Now, you u.se die evs diff ccjininand to coinjraie tw£j 
revisions of a file or pn^ject. But to do the comptirisom directly on 
file rejxjsitory, llsc the evs rdiff command Ag^iin, unlike rhe 
fijmien you do not need a working a>py t)f the project to use tiiis 
command. 

The Irasic syntax of the evs rdiff c:ommand Ls as follows. 

CVS rdiff LOptia«.s] tile | pVQfect 

iliLs command sliares many of the same ojitions as the evs 
rdiff eonirnand. Assume, lor example, that you are managing the 
project foobar. To set tJie tag alphal to the latest revision of 
f oobar. htm, type the a>mmand as follows, 

Assume you are working on projea foobar. ib compare its 
latest revision against revision l.% type the evs rdiff t:ommand 

witli a -r option. 

CVS rdiff r 1.5 foobar 

To compare levision IJ against 1.5, ase two r option.s as Ibllows. 
CVS rdiff r l.l -r K5 foobar 


Make sure file reixxsitory contains txjili revisions, or CVS w'ill return 
an error message. If you are not sure, you can add a -f option to 
file ct)mmand. 

CVS rdiff -f -r 1.1 -r 1,5 foobar 

CVS w'ill use the latest revision if it fails to find one of the revision 
numbers. 

Supjxjsc you want to check on file projed file f oobar * htm. 
To compare its Uitest revision ag^iinst tlie one on 2(XJ7 Sep 01, type 
the CVS rdiff command with a -D (Option. 
cvB rdiff ‘D 2007/09/01 foobar/ 

To compare the file horn 2007 Sep 15 against the one on 2(X)7 Sep 

01, use two -D options as folkm^s. 

CVS rdiff -D 2007/09/01 -D 2007/09/30 foobar/foohar*htra 

Make .sure to place the earliest date first. Make sure also fiiai die 
repository contains bah dates. Use the f O|5tion if you am lajt 

sure. 

Now file CVS rdiff conumnd generates iLs output in one of 
m'o fomiars. ihe first Ibrmat, context diff, Ls die default foniiat. It is 
the one used by most RSD pnejects, llie second tbrm;it, unifiedchffl 
is a mote compaet fonimt. It Ls also die one used liy mast GNU 
projects. 

Assume you are a>mparing die latest revision of foobar. css 
against nrvision 1.5. To save the results in context diffi type the evs 
rdiff comnxind as Ibllows. 

CVS rdiff -r 1.5 ft>obar/foobar.css > foobar, diff 
CVS diCTi stives file comparison resulLs into fiie file foobar .diff. 
To save die results in unified dilf. add a -u t>}Xion. 

eva rdiff -r 1.5 u Faobar/foobar.cHs > foobar.diff 
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Logic Boards 

G3/G4 PCI/AGP: $59 
G4 Gigabit/DigAudio: $99 
G4 Quidtsilver; $299 
G4 MOD: $489 


G4 eMac: from $99 
64 iMac: from $199 
G5 iMac: from $399 



Intel IMac: from $499 
G5 tower: $399/499/799 
G4 Xserve: $149-$299 
G5 Xserve: $599 

Power Supplies 



G4 iMac 15/17/20": $49/79/99 
G5 iMac17OT: $149/179 
G5 Tower: $169/199 


G4 Qutcksilver/Dig Audio: $179 
G4 MDD: $299 , 7^ 

Logic board/power supplies 
require exchange 


Systems 

G5 1.6/1.8GHZ $699/799 
G5 1.8/2.0GHZ DP $899/999 
G5 2.3^2.7GHz DP $1099/1299 
G5 2.50Hz Quad Dual DVt $1499 
White Intel IMacsiH 
CD/C2D 1.83GHZ ir $599/649 
CD/C2D2.0GHZir $649/699 
CD/C2D2.0GHZ20" $699/799 
C2D 2.16GHZ 20"/24" $829/999 
C2D 2.16GHZ /24" W/Leopard $1099 

Need G5 IMacs? 

G5 1.6/1.8/1.9GHz ir $499/549/599 
G5 1.8/2.0/2.1GHZ 20" $579/569/679 
AirPort Cards 
Standarci/Extreme: $69,99 
802,11 N Upgrades $79.99 
Bluetooth Upgrade $39,99/59.99/79.99 

1 -888-Mac-Resource 


www.mac-resource.com 


New Systems Arriving Daily! Cali Far 
Latest Stock. 

eMacs GALORE, GREAT 
WORKSTATIONS! 
700MHz^56MB/40GB/CD: $129 
1.0GHz/256Me/40GB/CD: $199 

We Have G5 Xserves & RAIDS 
Even If Apple Doesn't !t!! 

G5 Xserve Cluster Node: $1429 
G5 Xserve Full Unit: $1699 
1TB Xserve RAID from $2899 
2.8TB Xserve RAID from $4699 
5.8TB Xserve RAID from $6499 
3.5/7,0TB Xserve RAID: $4899/6299 
We also carry FibreChannel Cards, Drive/ 
Controller Modules, Power Supplies,. 
Overnight Service 
Available!!!! 

Refurbished Displays 
Aluminum 

20/23 Cinema(DVI): $399/599 
30 Cinema(DVI): $1099 

Crystal 

22/23" Cir>ema(ADC): $449/499 
15" Studio LCD(ADC): $99 
17'' Studio LCD{ADC): $149 
ir Studio CRT. ADC/VGA: $49.99 
All Products are refurbished or 
demo call for more information. 










Once you siivecl the results, you am send the file to non-Q^S iLsers. 
Tht>se users can tlien update iJieir cx)py of foobar-css using 
your dilT file and tile patch tcxil For more information alxuit that 
toof type man patch at the demiinal ptompf. 

Managing miscellanea 

Ifse the CVS admin command to make changes to a pnijei'i 
file in your repository. Unlike tine previous two commands, you will 
need a working copy of die project in order to use diis cxjuinwrid. 
Also, most changes you make with this command are timk)^dhk\ 
Make ct ^xtekit!} of the rejxmior}^ to protect yoimeif fnmt any 
mislakes, 

'File basic synUix of the evs admlti aimmand Ls as ftillow's. 

CVS admin [options] [file] 

Tile flic arguTiient sjiedfics wliich file to change. If tins aiguiiient is 
missing, die command will apply the change to all the kitest 
rei^isions of the project's files, Tlie options argiimeni specifics 
wha! changes U) make to die file in the repository. 

Suppose a user used the wiong message w^hen he committed 
his changes to the file foobar ,htiiL To coriect the message, first 
find out die revision nurnlx?r of diat committed file, e.g, 1.5. Tlien 

use die evs admin command with a -m option as follow^s, 

CVS adndn ml.5the corrset message here'' 

foobar.htra 

Supjiose you want to trim down your project repasitor>^ A 
gtxxi way to do so is to use the evs admin command with a -o 
option. TTien .specify a range of rev isit ins to remove I’njin the 
repository. For example, to reimjve all revisions of foobar,htiD 

f)etUKx^i 12 and IS type the coniimind as ksllow^s. 
eve adtiiin -ol.2i:1.5 fdobat.htm 

Note the use of doufjle-colons, V: : \ when setting the range. To 
remove revisitjns 12 and ISm tmll, use a single colon, ': \ to set 

the range. 

eve adjiin -01.2:1,5 foobar.htm 

To remove revisions 12 and okler of foobar .htim, specify the 

range as follow^s. 

CVS admin -6:1,2 foobar.htm 

To mmove revisions 12 and tmm‘of dial file, sjiecify the range as 
lollows. 

CVS admin -oU2: foobar.htm 

Again, if you wiint to exclude revision 1.2 from die range, use 
donhlecolom, ';: \ to sel ilie mnge. 

By default, CVS ,seLs all pnijecL files to an Exp {e:xfKTimenkih 
state. Other passible states include Stab, ft ir stable, and Rel. ftir 
release. You cxin alst) .specify your owm state laheL 

Suppo.se you want to change die latest if vision of the 
foobar^htui file to a Stab state. To do so, use the eva admin 

wmniand with a -e option. 

cv^ admin -nStab: fodbar.htm 

To set revision 1.5 of foobar^htm to a Test state, type die 

command as follows. 

CVS adroln -sTest:L5 foobar.htm 

Notice dial diere are nc? sjraces lietw'een die - s option and tlie state 
laixfl itself. Notice also that the revulsion number comes after the 
‘’ token. To find out if CVS set the correct state, iype. evs log 
foobar.hm CVS will display die file’s state in one of its log 


eniries (Figure 1, tvd). 

CYS also leaves the project file's description blank Tb add 
your owm de.scription, use the evs admin command with a -t 
option. For example, to add a dcscTijition to foobar .btm, type the 
command as follows. 

CVS iadwtn r. "This is a test HTML file."* foobar.htm 

Note die use of a dash, ' -to ,se]Tdrate the -t option and the 
description .string. To add a much huger description, first add the 
description to a separate file, e,g. foobar. txt. Then type the evs 

admi n command a.s follows. 

CVS admin -ttoobar.txc foobar,hun 

Also, when you type evs log foobar,htm, you will see the 
desc^ription .siring on that command’s ouLpul (Figure 1, green). 

Final Thoughts 

Tliis article kis shown you a kindful of ways lo get more out 
of your CY5 semp. It showed how to configure your setup to suit 
your needs, li showed how lo tnick changes lo pn)jet:i file.s and die 
users dial made diem. It also showed liow to maintain tlie 
repository, its tags md diffs. 

Despite its limits, CVS is still a ptjpular uk>I for managing OS 
X projects, U is available iin iiW versions of OS X ^md it integrates 
wfll wfdi otlier tools such as BBEdit and Xccxle. It also inspired 
u-sei^s to cieate tools that address its limits and extend iLs capaliililies. 

It is passible diat odier SCM UxiLs such as Subvemion and Git 
will finally rc*[ilace CVS in die near future. Until diat liappens, 
liowever, CVS is a strong management sy.stem, alive and wf II. 
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Short Term Computer Needs? 


• Latest Apple Technology 

• Legacy Macs 

• Windows Computers 



Mac Rentals 


Event Technology Services 


• Rent One or Hundreds 

• Audiovisual Gear 

• Projectors, Plasmas, LCDs 

• B&W & Color Copiers 
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• Nationwide Delivery 

• Professional Setup 
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• Compatibility & Compliance Testing 
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• Trainings Sessions, Classrooms 

• Fortune 100 and Educational P.O.’s Accepted! 


Toll Free 


800 - 756-6227 

Outside us/Canada: 858*454-8535 


For Online Quote Request, Visit: 

www.madcomputing.com 
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Book Review 


by Edward Marczak 

Xcode 3 Unleashed, 

by Fritz Anderson 

Rev up your Xcode-fu 
___/ 


Xcode 3 Unleashed fills a unique niche in the MacinTosh 
development workl it doesn’t aim to teach cfxiing per se, but 
yotill prolxit^ly pick up some new technkjues by reading the 
lxx)k. Nor does it aim to teadi Cocoa or Olijective-C, but yoLill 
see plenty. Xcode 3 Unleaslied (X3uJ is just tliat: an expose on 
Xa>de^ Apple’s tree develof'j merit environ men I for OS X, As a 
freely available system, Xcode may Ix" 
a touch under-documented, or, 
perhaps, not ckxumented in a manner 
cimducLive to learning alxiut c“ach of its 
many facets. X3u solves that. 

X3u is divided into 2 main parts, 
with part 3 containing appendices. Tlie 
first part is meant to be read 
sequentially, and leads the reader 
through writing a sample application 
using Xcode. Tlie a|)j)licatton starts as a 
simple command-line Uxil, and l^y the 
end of the senion is an advanced GUI 
apfilication that has a command-line 
helper and relies on a custom 
framework lil^raiy b;ach step 
demonstrates a dear 1k>w-io using the 
Xcode IDE. My lavorite part of the first 
section is how early Fritz introduces 
version ct>ntrol-Lising subversinn^ives 
every rea.son wiiy it’s critical to use 
version control, and then integrates the 
use of sTjbvLTsion into Xcode and Lite following examples. 

Tlie second [>ari can !x^ read scxjLteiitially or used as a 
reference. I'liis section gets deeper into concepts and commands 
pre.senled into the first .section, and pulls the covers bac'k a little 
further. Here, Fritz presents details on how Xctxle and Interface 
Builder work most of their magic, blending open scxirce 
componeni.s and Apple supplied tools anci glue. 

In part I, which encompa.sse.s chapters one through 19, X3u: 
shows how^ to launch Xcode and write and build a “Hello, 
Worldr application (chapter 1), show.s how to use Xcode’s 
integrated dehuggef (chapter 3)^ explains whal iiappens during 
a compile and build (chapter 4), introduces version control 
(chapter 8), details pro|x?rty lists (chapter 9), creates a library^ for 
the sample project (chapter 10), explains how to write unit tests 


for your appliaition using tiie SenlestingKit framework 
(chapter 12), details dcxurnentation-hotli Xcode-wise 
and for purposes of dexu men Ling your source (chapter 
15), explains how to target different architectures 
(chapter 17) and more. 

As mentioned, pari 2-chapiers 20 tliiougli ZT-refine 
the lessoas tauglit in part 1 and also go deeper into 
Xcode and Interface Builder. Chapter 20 opens wiih 
details about Xcode that will make yt>ur job easier, and 
knowledge greater. It touches on Code Sense and 
indexing, Oxle Focus, gives a closer lcx>k at the Groups 
and Files list in the editor window and more. From tlierc, 
diat)icr 21, ’’Xcode for make Veterans,'’ and chapter 24, “A Legacy 
Project," takes an open source applit:aiion and shtiws how to 
build an Xcode project frtmi tlie download's Makefile and otlier 
files (practically worth tlie price of the hxyk alone). Pan 2 
continues on witli: more on delxigging (chapter 22) and mtire 
w'ays to introspect and improve an application using Apple 
supplied ttxvis such as Shark and CHUD (chapter 25) and 
In.struments (chapter 26 ). 

Simply, Xccxle 3 Unlea.shed i.s for anyi)ne 
that uses Xcode. Hie imder lcam.s the liiythm 
of tlie development cycle of an OS X 
application devek>ped with Xccxle. Fritz’s 
knowledge and experience is clear. The 
writing, presentation and editing are all 
e,xcellent. Each chapter is tightly foaised and 
conGse. X3ii largeis Xcode 3, l>ut dcxrs not 
solely target OS X Leopard, vlO.5. I'ritz does, 
however, always point out where there would 
tx* a difference in doing so. In short, there’s 
somelhing for everyone, no matter their level 
l>eginner or long-time Xcode user, and 
ixfiongs in every' OS X or iPhone devdoy>eris 
library. 

Title: Xcode 3 Onleash^ 

xAutlxjn Fritz Anderson 
Publisher: Sams 
Price: $443W USA 
ISBN-13; 97H-tK321-55263-1 

On the wdi: 

http: //WWW. i nformi t. com /Htle/9780321 55263 1 
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THE MACTECH SPOTLIGHT 

Blair Yakimovich 

TRANSGAMING, INC. 

What do you do? 

I'm an Ai%sodatu ProduccT for TransGaming Inc., an 
innovaiive company who provides portability solutions 
for video game publishers and developers. 

How long have you been doing what you do? 

Tve been producing for a year. Before that I was a 
developer for 7 years. 

What was your first computer? 

In 1990, my parents boughi a Mac classic for the 
family. My life was llien devoted to acquiring as many 
shareware games as 1 could get my eleven-year old paws 
on. Nightly, I thanked Silicon Beach Software for Dark 
Castle and Beyond Dark QiSlle. 

Are you Mac-onlyv or a multi-platform person? 

I’m a muki-platform person, hut I predtjminantly use 
the Mac. I w^as raised on the Mac for eight years before 1 
w^as introduced to Windows in high school. My eduaition 
in programming taught me lo appretriate Dnux, Ttjciay, I 
find 1 can enjoy the lx\st of many platforms thn>ugh the 
Mac ’ the classic user-environmeni of a Mac, the pt jwer 
of the command line in the Tenninal, and a rapidly 
growing host of games .seen previously only on 
Windows. 

Whafs the coolest thing about the Mac? 

I was going to say the chime that .sounds every time 
you lurn one on - it definitely evokes a Pavlovian 
response of excitement from me. My Windows PC 
beeps...it doesn't chime. Expose is pretty rad too. 

What is the advice you*d give to someone trying to 
get into this line of work today? 

Enthusiasm - let it ftiel your desire to break in. If 
you’re a developer, develop snmll game.s and demos to 
show off your chojis. ij' you love to play games and liave 
an analytical mind. QA is a great place to te,st your metrle. 

What^s the coolest tech thing you’ve done using OS 
X? 

Make PC games work on the Mac. 

Where can we see a sample of your work? 

At hlfp://wviAv. 9 am^rBeon!fne.^ and the Apple 
Store! Eve worked on over 20 games for the Mac. 
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including Spore, Jade Empire, Battlefield 2142, Command and 
Conquer 3: Tilieriuni Wars, Need for Speed Carlxin^ and llie lx>.st 
Cases of Slierlock Htjimes. 

The next way Vm going to impact IT/OS X/the Mac universe 
is: 

To continue to take my passion for Mac gaming and infect 
interested publishers and developers, 'line Mac Gaming community is 
rapidly expanding, and I w^ant to continue to be at the forefront, 
enabling as many titles as I can using our Cider technology. My goiil 
is for no Mac-user to walk into an elearonics store eager for games, 
and leave empry'-handed. 

I 


If yw or someone you know belongs in the MacTeth ^otB^t kt us 
know! Send iklf^s to eiStorkd^noetetkcofn 
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give this year. 
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With over 3,000 featured products year-round, Small Dog Electronics has a gift for everyone. From 
iPods to pro video cards to Mac bundles that feature everything you could possibly want in 
one package, Smalldog«com is the Mac lovers' destination for hardware, software and more. 


Buying for yourself? Either way, visit Smalldog.com/speciais for the latest deals-browse from 
over 7S featured specials a day! Every order outside of Vermont is always tax-free, and our 
friendly, knowledgeable staff is always ready to help with any question you may have. 
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